Lucene search

[email protected]CVE-2004-1626

HistoryFeb 20, 2005 - 5:00 a.m.

CVE-2004-1626

2005-02-2005:00:00

[email protected]

web.nvd.nist.gov

cve-2004-1626

buffer overflow

ability server

remote code execution

stor command.

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

8 High

AI Score

Confidence

High

0.175 Low

EPSS

Percentile

96.2%

JSON

Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR command.

Affected configurations

NVD

Node

code-craftersability_serverMatch2.2.5

code-craftersability_serverMatch2.3.2

code-craftersability_serverMatch2.3.4

CPENameOperatorVersion
code-crafters:ability_servercode-crafters ability servereq2.2.5
code-crafters:ability_servercode-crafters ability servereq2.3.2
code-crafters:ability_servercode-crafters ability servereq2.3.4

CPE	Name	Operator	Version
code-crafters:ability_server	code-crafters ability server	eq	2.2.5
code-crafters:ability_server	code-crafters ability server	eq	2.3.2
code-crafters:ability_server	code-crafters ability server	eq	2.3.4

References

marc.info/?l=bugtraq&m=109850947508816&w=2

secunia.com/advisories/12941

www.kb.cert.org/vuls/id/857846

www.osvdb.org/11030

www.securityfocus.com/bid/11508

exchange.xforce.ibmcloud.com/vulnerabilities/17823

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

8 High

AI Score

Confidence

High

0.175 Low

EPSS

Percentile

96.2%

JSON

Related for CVE-2004-1626

nvd1 cvelist1 nessus1