Lucene search

[email protected]CVE-2004-1208

HistoryJan 10, 2005 - 5:00 a.m.

CVE-2004-1208

2005-01-1005:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-1208

orbz

buffer overflow

denial of service

remote attackers

arbitrary code

nvd

8.9 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.038 Low

EPSS

Percentile

91.8%

JSON

Buffer overflow in Orbz 2.10 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long password field in a join request.

CPENameOperatorVersion
21-6_productions:orbz21-6 productions orbzeq2.8
21-6_productions:orbz21-6 productions orbzeq2.5
21-6_productions:orbz21-6 productions orbzeq2.7
21-6_productions:orbz21-6 productions orbzeq2.6
21-6_productions:orbz21-6 productions orbzeq2.9
21-6_productions:orbz21-6 productions orbzeq2.10

CPE	Name	Operator	Version
21-6_productions:orbz	21-6 productions orbz	eq	2.8
21-6_productions:orbz	21-6 productions orbz	eq	2.5
21-6_productions:orbz	21-6 productions orbz	eq	2.7
21-6_productions:orbz	21-6 productions orbz	eq	2.6
21-6_productions:orbz	21-6 productions orbz	eq	2.9
21-6_productions:orbz	21-6 productions orbz	eq	2.10

References

marc.info/?l=bugtraq&m=110176280402580&w=2

www.securityfocus.com/bid/11774

exchange.xforce.ibmcloud.com/vulnerabilities/18298

8.9 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.038 Low

EPSS

Percentile

91.8%

JSON

Related for CVE-2004-1208

cvelist1