CVE-2004-0006
- State
- Published
- Severity
- Not scored
- Published
- Jan 29, 2004
- Updated
- Aug 8, 2024
- Reserved
- Jan 5, 2004
Description
Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 9489vdb-entry
- DSA-434vendor-advisory
- RHSA-2004:032vendor-advisory
- SuSE-SA:2004:004vendor-advisory
- 3732vdb-entry
- SSA:2004-026vendor-advisory
- oval:org.mitre.oval:def:818vdb-entrysignature
- VU#871838third-party-advisory
- VU#444158third-party-advisory
- 20040126 Advisory 01/2004: 12 x Gaim remote overflowsmailing-list
- VU#297198third-party-advisory
- gaim-login-value-bo(14941)vdb-entry
- oval:org.mitre.oval:def:10222vdb-entrysignature
- http://ultramagnetic.sourceforge.net/advisories/001.html
- GLSA-200401-04vendor-advisory
- 1008850vdb-entry
- 20040127 Ultramagnetic Advisory #001: Multiple vulnerabilities in Gaim codemailing-list
- http://security.e-matters.de/advisories/012004.html
- RHSA-2004:033vendor-advisory
- MDKSA-2004:006vendor-advisory
- gaim-yahoowebpending-cookie-bo(14939)vdb-entry
- gaim-http-proxy-bo(14947)vdb-entry
- gaim-login-name-bo(14940)vdb-entry
- 20040126 Advisory 01/2004: 12 x Gaim remote overflowsmailing-list
- VU#527142third-party-advisory
- gaim-urlparser-bo(14945)vdb-entry
- VU#371382third-party-advisory
- gaim-yahoopacketread-keyname-bo(14943)vdb-entry
- CLA-2004:813vendor-advisory
- 3731vdb-entry
- VU#503030third-party-advisory
- RHSA-2004:045vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.