{"id": "CVE-2004-2078", "bulletinFamily": "NVD", "title": "CVE-2004-2078", "description": "Red-M Red-Alert 2.7.5 with software 3.1 build 24 allows remote attackers to cause a denial of service (reboot and loss of logged events) via a long request to TCP port 80, possibly triggering a buffer overflow.", "published": "2004-02-09T00:00:00", "modified": "2017-07-10T21:31:36", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2004-2078", "reporter": "NVD", "references": ["http://www.securiteam.com/securitynews/5SP0C0KC0A.html", "https://exchange.xforce.ibmcloud.com/vulnerabilities/15086", "http://marc.info/?l=full-disclosure&m=107635119005407&w=2", "http://genhex.org/releases/031003.txt", "http://securitytracker.com/id?1009001", "http://www.securityfocus.com/bid/9618", "http://www.securityfocus.com/archive/1/353211"], "cvelist": ["CVE-2004-2078"], "type": "cve", "lastseen": "2017-07-11T11:14:40", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/h:red-m:red-alert:2.7.5_v3.1_build_24"], "cvelist": ["CVE-2004-2078"], "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "description": "Red-M Red-Alert 2.7.5 with software 3.1 build 24 allows remote attackers to cause a denial of service (reboot and loss of logged events) via a long request to TCP port 80, possibly triggering a buffer overflow.", "edition": 1, "hash": "07505d85a11088720219aa835d5eb4d0a6bb77f602beeaf71b173a94003a3213", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "fdd2f542b7f00da37f3bc35b172001ed", "key": "description"}, {"hash": "56765472680401499c79732468ba4340", "key": "objectVersion"}, {"hash": "bb651a9660f96e1e9a0c9c2e58cb61be", "key": "cpe"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "d70f45f2280248ac2583513df779cddb", "key": "href"}, {"hash": "141e1b08073fce0e78b53d5f4d2b0aed", "key": "references"}, {"hash": "0433f8a4f5c5ef530ca2e75ea8415f43", "key": "cvelist"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "f67ae5eee583314cd41f7d52d63c722c", "key": "published"}, {"hash": "429b88724f996e87cb763e6bd3dd806c", "key": "modified"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "84813b1457b92d6ba1174abffbb83a2f", "key": "cvss"}, {"hash": "1641383b69dbb8050e47cf58e16ea1eb", "key": "title"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2004-2078", "id": "CVE-2004-2078", "lastseen": "2016-09-03T04:46:38", "modified": "2008-09-05T16:43:08", "objectVersion": "1.2", "published": "2004-02-09T00:00:00", "references": ["http://www.securiteam.com/securitynews/5SP0C0KC0A.html", "http://marc.theaimsgroup.com/?l=full-disclosure&m=107635119005407&w=2", "http://xforce.iss.net/xforce/xfdb/15086", "http://genhex.org/releases/031003.txt", "http://securitytracker.com/id?1009001", "http://www.securityfocus.com/bid/9618", "http://www.securityfocus.com/archive/1/353211"], "reporter": "NVD", "scanner": [], "title": "CVE-2004-2078", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T04:46:38"}, {"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/h:red-m:red-alert:2.7.5_v3.1_build_24"], "cvelist": ["CVE-2004-2078"], "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "description": "Red-M Red-Alert 2.7.5 with software 3.1 build 24 allows remote attackers to cause a denial of service (reboot and loss of logged events) via a long request to TCP port 80, possibly triggering a buffer overflow.", "edition": 2, "enchantments": {}, "hash": "6f6c9d213ee7bc80c5be2daaf8c60e3a12b9843cd0c6a66b8e3d50ee6f3cb0ce", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "958b5fa3a61d34dfaf98c2bb1660d3a7", "key": "references"}, {"hash": "1d9140f052e40dc2eb74ee40d408ede1", "key": "modified"}, {"hash": "fdd2f542b7f00da37f3bc35b172001ed", "key": "description"}, {"hash": "bb651a9660f96e1e9a0c9c2e58cb61be", "key": "cpe"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "d70f45f2280248ac2583513df779cddb", "key": "href"}, {"hash": "0433f8a4f5c5ef530ca2e75ea8415f43", "key": "cvelist"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "f67ae5eee583314cd41f7d52d63c722c", "key": "published"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "84813b1457b92d6ba1174abffbb83a2f", "key": "cvss"}, {"hash": "1641383b69dbb8050e47cf58e16ea1eb", "key": "title"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2004-2078", "id": "CVE-2004-2078", "lastseen": "2017-04-18T15:50:45", "modified": "2016-10-17T23:05:58", "objectVersion": "1.2", "published": "2004-02-09T00:00:00", "references": ["http://www.securiteam.com/securitynews/5SP0C0KC0A.html", "http://xforce.iss.net/xforce/xfdb/15086", "http://marc.info/?l=full-disclosure&m=107635119005407&w=2", "http://genhex.org/releases/031003.txt", "http://securitytracker.com/id?1009001", "http://www.securityfocus.com/bid/9618", "http://www.securityfocus.com/archive/1/353211"], "reporter": "NVD", "scanner": [], "title": "CVE-2004-2078", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 2, "lastseen": "2017-04-18T15:50:45"}], "edition": 3, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "bb651a9660f96e1e9a0c9c2e58cb61be"}, {"key": "cvelist", "hash": "0433f8a4f5c5ef530ca2e75ea8415f43"}, {"key": "cvss", "hash": "84813b1457b92d6ba1174abffbb83a2f"}, {"key": "description", "hash": "fdd2f542b7f00da37f3bc35b172001ed"}, {"key": "href", "hash": "d70f45f2280248ac2583513df779cddb"}, {"key": "modified", "hash": "d5511fea6171e2a7702e5b2ebf54438c"}, {"key": "published", "hash": "f67ae5eee583314cd41f7d52d63c722c"}, {"key": "references", "hash": "dceff43d9829d53101eefbbb9817ef37"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "1641383b69dbb8050e47cf58e16ea1eb"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "0ad0ff5bbedca95968bc690f64af78fb246b2edfd855048169b7a58948785ac2", "viewCount": 0, "enchantments": {"score": {"value": 5.0, "vector": "NONE", "modified": "2017-07-11T11:14:40"}, "vulnersScore": 5.0}, "objectVersion": "1.3", "cpe": ["cpe:/h:red-m:red-alert:2.7.5_v3.1_build_24"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": []}

{"osvdb": [{"lastseen": "2017-04-28T13:19:58", "references": [], "edition": 1, "description": "## Vulnerability Description\nRed-Alert contains a flaw that may allow a remote denial of service. The issue is triggered when a very long string is sent to port 80, and will result in loss of availability for the platform.\n## Solution Description\nCurrently, there are no known workarounds or upgrades to correct this issue. However, Red-M has released a patch to address this vulnerability.\n## Short Description\nRed-Alert contains a flaw that may allow a remote denial of service. The issue is triggered when a very long string is sent to port 80, and will result in loss of availability for the platform.\n## Manual Testing Notes\nperl -e 'print \"a\"x1230 . \"\\r\\n\\r\\n\"| nc <device ip> 80 \n## References:\nVendor URL: http://www.red-m.com/\nVendor URL: http://www.red-m.com\nSecurity Tracker: 1009001\n[Secunia Advisory ID:10832](https://secuniaresearch.flexerasoftware.com/advisories/10832/)\n[Related OSVDB ID: 3953](https://vulners.com/osvdb/OSVDB:3953)\n[Related OSVDB ID: 3952](https://vulners.com/osvdb/OSVDB:3952)\nOther Advisory URL: http://genhex.org/releases/031003.txt\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2004-02/0233.html\nISS X-Force ID: 15086\n[CVE-2004-2078](https://vulners.com/cve/CVE-2004-2078)\nBugtraq ID: 9618\n", "reporter": "Bruno Morisson(morisson@genhex.org)", "published": "2004-02-08T07:08:46", "type": "osvdb", "title": "Red-Alert Long String DoS ", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "bulletinFamily": "software", "affectedSoftware": [{"name": "Red-Alert", "version": "3.1", "operator": "eq"}], "cvelist": ["CVE-2004-2078"], "modified": "2004-02-08T07:08:46", "href": "https://vulners.com/osvdb/OSVDB:3891", "id": "OSVDB:3891", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}}], "exploitdb": [{"lastseen": "2016-02-02T21:32:14", "osvdbidlist": ["3891"], "_object_types": ["robots.models.exploitdb.ExploitDbBulletin", "robots.models.base.Bulletin"], "references": [], "description": "Red-M Red-Alert 3.1 Remote Vulnerabilities. CVE-2004-2078. Dos exploit for hardware platform", "reporter": "Bruno Morisson", "published": "2004-02-09T00:00:00", "type": "exploitdb", "title": "Red-M Red-Alert 3.1 - Remote Vulnerabilities", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "bulletinFamily": "exploit", "cvelist": ["CVE-2004-2078"], "_object_type": "robots.models.exploitdb.ExploitDbBulletin", "modified": "2004-02-09T00:00:00", "id": "EDB-ID:23672", "href": "https://www.exploit-db.com/exploits/23672/", "sourceData": "source: http://www.securityfocus.com/bid/9618/info\r\n\r\nProblems in various abilities have been identified in the Red-M Red-Alert network monitors. Because of this issues, an attacker may be able to crash a vulnerable device and eliminate logs, gain unauthorized access to the administrative interface, or partially evade detection by an affected device.\r\n\r\n$ perl -e 'print \"a\"x1230 . \"\\r\\n\\r\\n\"| nc <device ip> 80", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/23672/"}]}