CVE-2004-0006: CVE-2004-0006

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2004-0006

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Gaim多个远程边界条件错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Gaim是一款能多种协议进行即时通信的程序，Ultramagnetic是Gaim的派生程序。 Gaim对多种协议进行通信时存在边界条件错误问题，远程攻击者可以利用这个漏洞进行缓冲区溢出攻击，可能未授权访问使用此软件的主机系统。在审核Gaim源代码时发现存在12个安全问题，具体如下： YMSG协议(yahoo messenger)处理器存在缓冲区溢出： 01) Yahoo Octal-Encoding Decoder缓冲溢出 02) Yahoo Octal-Encoding Decoder越界缓冲区溢出

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2004-0006

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2004-0006

Please Login to view more intelligence information

http://ultramagnetic.sourceforge.net/advisories/001.htmlx_refsource_CONFIRM
http://security.e-matters.de/advisories/012004.htmlx_refsource_MISC
http://www.osvdb.org/3731vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/9489vdb-entryx_refsource_BID
http://www.osvdb.org/3732vdb-entryx_refsource_OSVDB
http://www.securitytracker.com/id?1008850vdb-entryx_refsource_SECTRACK
http://www.debian.org/security/2004/dsa-434vendor-advisoryx_refsource_DEBIAN
http://www.kb.cert.org/vuls/id/503030third-party-advisoryx_refsource_CERT-VN
http://www.kb.cert.org/vuls/id/444158third-party-advisoryx_refsource_CERT-VN
http://www.kb.cert.org/vuls/id/297198third-party-advisoryx_refsource_CERT-VN
http://www.kb.cert.org/vuls/id/527142third-party-advisoryx_refsource_CERT-VN
http://www.kb.cert.org/vuls/id/371382third-party-advisoryx_refsource_CERT-VN
http://www.kb.cert.org/vuls/id/871838third-party-advisoryx_refsource_CERT-VN
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158vendor-advisoryx_refsource_SLACKWARE
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813vendor-advisoryx_refsource_CONECTIVA
http://www.redhat.com/support/errata/RHSA-2004-033.htmlvendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2004-045.htmlvendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2004-032.htmlvendor-advisoryx_refsource_REDHAT
ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.ascvendor-advisoryx_refsource_SGI
ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.ascvendor-advisoryx_refsource_SGI
http://www.mandriva.com/security/advisories?name=MDKSA-2004:006vendor-advisoryx_refsource_MANDRAKE
http://security.gentoo.org/glsa/glsa-200401-04.xmlvendor-advisoryx_refsource_GENTOO
http://www.novell.com/linux/security/advisories/2004_04_gaim.htmlvendor-advisoryx_refsource_SUSE
https://exchange.xforce.ibmcloud.com/vulnerabilities/14945vdb-entryx_refsource_XF
https://exchange.xforce.ibmcloud.com/vulnerabilities/14947vdb-entryx_refsource_XF
https://exchange.xforce.ibmcloud.com/vulnerabilities/14940vdb-entryx_refsource_XF
https://exchange.xforce.ibmcloud.com/vulnerabilities/14941vdb-entryx_refsource_XF
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A818vdb-entrysignaturex_refsource_OVAL
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10222vdb-entrysignaturex_refsource_OVAL
https://exchange.xforce.ibmcloud.com/vulnerabilities/14939vdb-entryx_refsource_XF
https://exchange.xforce.ibmcloud.com/vulnerabilities/14943vdb-entryx_refsource_XF
http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.htmlmailing-listx_refsource_FULLDISC
http://marc.info/?l=bugtraq&m=107513690306318&w=2mailing-listx_refsource_BUGTRAQ
http://marc.info/?l=bugtraq&m=107522432613022&w=2mailing-listx_refsource_BUGTRAQ
https://nvd.nist.gov/vuln/detail/CVE-2004-0006

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2004-0006

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2004-0006

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2004-0006

III. Intelligence Information for CVE-2004-0006

IV. Related Vulnerabilities

V. Comments for CVE-2004-0006

Leave a comment