CVE-2004-0510

Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demonstrated via the execmail program.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.7/SCOSA-2004.7.txt
http://marc.info/?l=bugtraq&m=109889281711636&w=2
http://www.deprotect.com/advisories/DEPROTECT-20040206.txt	URL Repurposed
http://www.securityfocus.com/bid/10758	Exploit Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16738

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:sco:openserver:5.0.6:::::::*
	cpe:2.3:o:sco:openserver:5.0.6a:::::::*
	cpe:2.3:o:sco:openserver:5.0.7:::::::*

History

14 Feb 2024, 01:17

Type	Values Removed	Values Added
References	~~() http://www.deprotect.com/advisories/DEPROTECT-20040206.txt -~~	() http://www.deprotect.com/advisories/DEPROTECT-20040206.txt - URL Repurposed

Information

Published : 2004-12-23 05:00

Updated : 2024-02-14 01:17

NVD link : CVE-2004-0510

Mitre link : CVE-2004-0510

CVE.ORG link : CVE-2004-0510

JSON object : View

Products Affected

sco

openserver

CWE

NVD-CWE-Other

{"id": "CVE-2004-0510", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2004-12-23T05:00:00.000", "references": [{"url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.7/SCOSA-2004.7.txt", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=109889281711636&w=2", "source": "cve@mitre.org"}, {"url": "http://www.deprotect.com/advisories/DEPROTECT-20040206.txt", "tags": ["URL Repurposed"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/10758", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16738", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demonstrated via the execmail program."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de b\u00fafer en MMDF sobre OpenServer 5.0.6 y 5.0.7, y posiblemente otros sistemas operativos, puede permitir a atacantes ejecutar c\u00f3digo de su elecci\u00f3n, como se ha demostrado utilizando el programa execmail"}], "lastModified": "2024-02-14T01:17:43.863", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E140F76-D078-4F58-89CF-3278CDCB9AF3"}, {"criteria": "cpe:2.3:o:sco:openserver:5.0.6a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBC635C0-2B09-41F5-8160-365EC8642F89"}, {"criteria": "cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D9D76A8D-832B-411E-A458-186733C66010"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}