// For flags

CVE-2004-0006

 

Severity Score

7.5
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.

Múltiples desbordamientos de búfer en Gaim 0.75 y anteriores, y Ultramagnetic anteriores a de 0.81, permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2004-01-05 CVE Reserved
  • 2004-01-26 CVE Published
  • 2024-02-13 EPSS Updated
  • 2024-08-08 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
References (36)
URL Tag Source
http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html Mailing List
http://marc.info/?l=bugtraq&m=107513690306318&w=2 Mailing List
http://marc.info/?l=bugtraq&m=107522432613022&w=2 Mailing List
http://www.kb.cert.org/vuls/id/297198 Third Party Advisory
http://www.kb.cert.org/vuls/id/371382 Third Party Advisory
http://www.kb.cert.org/vuls/id/444158 Third Party Advisory
http://www.kb.cert.org/vuls/id/503030 Third Party Advisory
http://www.kb.cert.org/vuls/id/527142 Third Party Advisory
http://www.kb.cert.org/vuls/id/871838 Third Party Advisory
http://www.osvdb.org/3731 Vdb Entry
http://www.osvdb.org/3732 Vdb Entry
http://www.securityfocus.com/bid/9489 Vdb Entry
http://www.securitytracker.com/id?1008850 Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/14939 Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/14940 Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/14941 Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/14943 Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/14945 Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/14947 Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10222 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A818 Signature
URL Date SRC
URL Date SRC
http://security.e-matters.de/advisories/012004.html 2017-10-11
http://ultramagnetic.sourceforge.net/advisories/001.html 2017-10-11
http://www.redhat.com/support/errata/RHSA-2004-032.html 2017-10-11
URL Date SRC
ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc 2017-10-11
ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc 2017-10-11
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813 2017-10-11
http://security.gentoo.org/glsa/glsa-200401-04.xml 2017-10-11
http://www.debian.org/security/2004/dsa-434 2017-10-11
http://www.mandriva.com/security/advisories?name=MDKSA-2004:006 2017-10-11
http://www.novell.com/linux/security/advisories/2004_04_gaim.html 2017-10-11
http://www.redhat.com/support/errata/RHSA-2004-033.html 2017-10-11
http://www.redhat.com/support/errata/RHSA-2004-045.html 2017-10-11
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158 2017-10-11
https://access.redhat.com/security/cve/CVE-2004-0006 2004-02-09
https://bugzilla.redhat.com/show_bug.cgi?id=1617131 2004-02-09
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Rob Flynn
Search vendor "Rob Flynn"
 Gaim
Search vendor "Rob Flynn" for product "Gaim"
 <= 0.75
Search vendor "Rob Flynn" for product "Gaim" and version " <= 0.75"
-
Affected
Ultramagnetic
Search vendor "Ultramagnetic"
 Ultramagnetic
Search vendor "Ultramagnetic" for product "Ultramagnetic"
 <= 0.81
Search vendor "Ultramagnetic" for product "Ultramagnetic" and version " <= 0.81"
-
Affected