NVD

Id
70865  
Name
CVE-2004-0418  
Description
serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2004-08-06  
Modified Date
2016-10-17  
Seq
2004-0418  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
365609 70865 CVE-2004-0418 20040604-01-U  View
365610 70865 CVE-2004-0418 20040605-01-U  View
365611 70865 CVE-2004-0418 20040609 Advisory 09/2004: More CVS remote vulnerabilities  View
365612 70865 CVE-2004-0418 20040611 [OpenPKG-SA-2004.027] OpenPKG Security Advisory (cvs)  View
365613 70865 CVE-2004-0418 oval:org.mitre.oval:def:1003  View
365614 70865 CVE-2004-0418 oval:org.mitre.oval:def:11242  View
365615 70865 CVE-2004-0418 http://security.e-matters.de/advisories/092004.html  View
365616 70865 CVE-2004-0418 GLSA-200406-06  View
365617 70865 CVE-2004-0418 DSA-519  View
365618 70865 CVE-2004-0418 MDKSA-2004:058  View
365619 70865 CVE-2004-0418 RHSA-2004:233  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62882 JVNDB-2004-000224 CVS の serve_notify() 関数における任意のコードを実行される脆弱性 ------------ CVE-2004-0418 8845 CVE-2004-0418 70865 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000224.html 2004-06-09 2007-04-01 View