CVE-2004-0188 : Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to

Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to execute arbitrary code via a long password.

Published 2004-03-15 05:00:00

Updated 2018-05-03 01:29:24

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Products affected by CVE-2004-0188

Calife » Calife » Version: 2.8.4 C
cpe:2.3:a:calife:calife:2.8.4_c:*:*:*:*:*:*:*
Matching versions
Calife » Calife » Version: 2.8.5
cpe:2.3:a:calife:calife:2.8.5:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 5 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

http://www.debian.org/security/2004/dsa-461

Debian -- The Universal Operating System
Patch;Vendor Advisory
http://www.securityfocus.com/bid/9756

Patch;Vendor Advisory
http://marc.info/?l=bugtraq&m=107789737832092&w=2

'Calife heap corrupt / potential local root exploit' - MARC
http://www.securityfocus.com/bid/9776
https://exchange.xforce.ibmcloud.com/vulnerabilities/15335

Calife long password buffer overflow CVE-2004-0188 Vulnerability Report

Jump to