2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2004-0416" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2004-08-06T04:00:00.000" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-20T23:48:32.687" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code."
} ,
{
"lang" : "es" ,
"value" : "Vulnerabilidad de doble liberaci\u00f3n en la cadena error_prog_name en CVS 1.12.x a 1.12.8, y 1.11.x a 1.11.16, puede permitir a atacantes remotos ejecutar c\u00f3digo arbitrario."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 10.0 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "COMPLETE" ,
"integrityImpact" : "COMPLETE" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "COMPLETE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "HIGH" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 10.0 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : true ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-119"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.10.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C9F7CA6E-7D45-46C9-A437-0D0C4D3F25CC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.10.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "62135DD0-140D-42C2-9302-31B5E2DE1A4A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D92B456C-5F8E-4DC2-940C-AE06B42DD3A9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.11.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "37B53C85-AA0E-40DD-B477-058586197714"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.11.1_p1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D1D1234F-1BB0-432B-B7B7-A97E3ADD5561"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.11.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6D472B97-F7C2-4973-9D71-AB3CF1F8774D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.11.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9D0DCF26-59A8-46AC-99D7-97C203A0D702"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.11.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B31BAACA-7518-48D2-ADEE-F59F4569D3BF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.11.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9D2748A8-5047-4338-A08E-986497AE4B1C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.11.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "525C4E91-2186-4D3A-9DF0-1C6A75A3F919"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.11.10:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EB231E7F-1A6F-4A79-8ED2-F6CAD311A5A6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.11.11:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FF7105E4-25F8-4AE3-9EDD-D44BF3E17145"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.11.14:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7C22BAF3-7B9C-4B2E-B5C6-1F37B896C301"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.11.15:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4AFFAE96-873A-4253-BCC7-1049DA81D9CA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.11.16:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D1163535-583A-4504-BE7B-8919143CDF9F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.12.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "766053F7-A174-4716-BF49-76B50FC79FD8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.12.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C7D2623F-167A-4976-B757-DAC4CCFAFE64"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.12.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FAEC4477-D040-450E-A850-8B03C937A600"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.12.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2848AA51-9AF1-448D-955F-50B5203F7229"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:cvs:cvs:1.12.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7B66BE64-E340-4777-B877-483FEAA66988"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openpkg:openpkg:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F74941A0-97CA-44D4-B55B-9224F051D40F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openpkg:openpkg:1.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "46B96764-9241-4586-9FA5-77D8D8EBE3BD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openpkg:openpkg:2.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "48A4B336-2D5B-4D9B-AA87-E5266FED05BD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0702A32E-E577-403C-B4D9-15037D7100A5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "29DC217F-C257-4A3C-9CBD-08010C30BEC3"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CA3CDD3C-DBA6-4BA2-967D-AD746822F3CF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9496279F-AB43-4B53-81A6-87C651ABC4BA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BDA160D4-5CAB-44E7-880A-59DD98FEAD62"
}
]
}
]
}
] ,
"references" : [
{
"url" : "ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://marc.info/?l=bugtraq&m=108716553923643&w=2" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://security.e-matters.de/advisories/092004.html" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://security.gentoo.org/glsa/glsa-200406-06.xml" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://www.debian.org/security/2004/dsa-519" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
} ,
{
"url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2004:058" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://www.redhat.com/support/errata/RHSA-2004-233.html" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10070" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A994" ,
"source" : "cve@mitre.org"
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://marc.info/?l=bugtraq&m=108716553923643&w=2" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://security.e-matters.de/advisories/092004.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://security.gentoo.org/glsa/glsa-200406-06.xml" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.debian.org/security/2004/dsa-519" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
} ,
{
"url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2004:058" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.redhat.com/support/errata/RHSA-2004-233.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10070" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A994" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2023-04-24 12:24:31 +02:00
}
]
}
