Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-0405
HistoryJun 01, 2004 - 4:00 a.m.

CVE-2004-0405

2004-06-0104:00:00
[email protected]
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.5%

JSON

CVS before 1.11 allows CVS clients to read arbitrary files via … (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180.

Affected configurations

NVD
Node
cvscvsRange≤1.10

Related

cve 2
nessus 8
gentoo 1
openvas 10
ubuntucve 2
cvelist 2
freebsd 1
slackware 1
debiancve 2
osv 1
nvd 1
redhat 1
debian 1
freebsd_advisory 1
altlinux 1
suse 1
cve
cve
CVE-2004-0180
2004-06-01 04:00:00
CVE-2004-0405
2004-06-01 04:00:00
nessus
nessus
RHEL 2.1 / 3 : cvs (RHSA-2004:153)
2004-07-06 00:00:00
FreeBSD : CVS path validation errors (0792e7a7-8e37-11d8-90d1-0020ed76ef5a)
2009-04-23 00:00:00
Slackware 8.1 / 9.0 / 9.1 / current : cvs security update (SSA:2004-108-02)
2005-07-13 00:00:00
gentoo
gentoo
CVS Server and Client Vulnerabilities
2004-04-14 00:00:00
openvas
openvas
Debian Security Advisory DSA 486-1 (cvs)
2008-01-17 00:00:00
Slackware: Security Advisory (SSA:2004-108-02)
2012-09-10 00:00:00
Debian Security Advisory DSA 486-1 (cvs)
2008-01-17 00:00:00
ubuntucve
ubuntucve
CVE-2004-0405
2004-06-01 00:00:00
CVE-2004-0180
2004-06-01 00:00:00
cvelist
cvelist
CVE-2004-0180
2004-04-16 04:00:00
CVE-2004-0405
2004-04-17 04:00:00
freebsd
freebsd
CVS path validation errors
2004-04-14 00:00:00
slackware
slackware
cvs security update
2004-04-18 16:40:41
debiancve
debiancve
CVE-2004-0180
2004-06-01 04:00:00
CVE-2004-0405
2004-06-01 04:00:00
osv
osv
cvs - several vulnerabilities
2004-04-16 00:00:00
nvd
nvd
CVE-2004-0180
2004-06-01 04:00:00
redhat
redhat
(RHSA-2004:153) cvs security update
2004-04-14 00:00:00
debian
debian
[SECURITY] [DSA 486-1] New cvs packages fix multiple vulnerabilities
2004-04-17 01:37:15
freebsd_advisory
freebsd_advisory
FreeBSD-SA-04:07.cvs
2004-04-15 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package cvs version 1.11.14-alt2
2004-04-07 00:00:00
suse
suse
remote code execution in cvs
2004-04-14 15:54:44

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.5%

JSON
Related for NVD:CVE-2004-0405
cve2nessus8gentoo1openvas10ubuntucve2cvelist2freebsd1slackware1debiancve2osv1nvd1redhat1debian1freebsd_advisory1altlinux1suse1