FKIE_CVE-2004-0784

Vulnerability from fkie_nvd - Published: 2004-10-20 04:00 - Updated: 2025-04-03 01:03
Severity ?
Summary
The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector.
References
cve@mitre.orghttp://gaim.sourceforge.net/security/?id=1Patch, Vendor Advisory
cve@mitre.orghttp://www.fedoranews.org/updates/FEDORA-2004-278.shtmlPatch, Vendor Advisory
cve@mitre.orghttp://www.fedoranews.org/updates/FEDORA-2004-279.shtmlPatch, Vendor Advisory
cve@mitre.orghttp://www.gentoo.org/security/en/glsa/glsa-200408-27.xmlVendor Advisory
cve@mitre.orghttp://www.redhat.com/support/errata/RHSA-2004-400.html
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/17144
cve@mitre.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10008
af854a3a-2127-422b-91ae-364da2661108http://gaim.sourceforge.net/security/?id=1Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.fedoranews.org/updates/FEDORA-2004-278.shtmlPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.fedoranews.org/updates/FEDORA-2004-279.shtmlPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.gentoo.org/security/en/glsa/glsa-200408-27.xmlVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.redhat.com/support/errata/RHSA-2004-400.html
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/17144
af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10008
Impacted products
Vendor Product Version
rob_flynn gaim 0.10
rob_flynn gaim 0.10.3
rob_flynn gaim 0.50
rob_flynn gaim 0.51
rob_flynn gaim 0.52
rob_flynn gaim 0.53
rob_flynn gaim 0.54
rob_flynn gaim 0.55
rob_flynn gaim 0.56
rob_flynn gaim 0.57
rob_flynn gaim 0.58
rob_flynn gaim 0.59
rob_flynn gaim 0.59.1
rob_flynn gaim 0.60
rob_flynn gaim 0.61
rob_flynn gaim 0.62
rob_flynn gaim 0.63
rob_flynn gaim 0.64
rob_flynn gaim 0.65
rob_flynn gaim 0.66
rob_flynn gaim 0.67
rob_flynn gaim 0.68
rob_flynn gaim 0.69
rob_flynn gaim 0.70
rob_flynn gaim 0.71
rob_flynn gaim 0.72
rob_flynn gaim 0.73
rob_flynn gaim 0.74
rob_flynn gaim 0.75
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D1EE775-471F-4D9F-9635-41CB581168D7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.10.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "5E56639E-2F96-4110-8846-0EA887D2967B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.50:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2FDCAE1-0B5D-449F-A83A-5028E7701109",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.51:*:*:*:*:*:*:*",
              "matchCriteriaId": "F984C4C7-6431-48DD-A0E0-0DC5F6052EB8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.52:*:*:*:*:*:*:*",
              "matchCriteriaId": "E955A141-DAEB-40EA-BE35-A5EED928E030",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.53:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3F02AE7-7A9C-4219-9472-9FAC8CBC637B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.54:*:*:*:*:*:*:*",
              "matchCriteriaId": "E94CDB8A-7120-41C6-95AF-5DBAD74F3204",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.55:*:*:*:*:*:*:*",
              "matchCriteriaId": "F4A3A068-BEBB-4E31-9CAD-4A2008CFBC91",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.56:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA529226-9252-41EE-8543-692F3119CF6D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.57:*:*:*:*:*:*:*",
              "matchCriteriaId": "C6FDD0E8-D0CB-4B4C-8E4C-A4979B116CC0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.58:*:*:*:*:*:*:*",
              "matchCriteriaId": "7366C749-E27C-422C-BFE0-DCC4B4D9C8AB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.59:*:*:*:*:*:*:*",
              "matchCriteriaId": "5622F4C0-43C8-44B1-A7C7-D3A7F1199FA1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.59.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A2E8C61-B01A-482A-9B8D-0072AB6BB7DF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.60:*:*:*:*:*:*:*",
              "matchCriteriaId": "30E40E9A-950B-4D6E-A748-5F76F7B97AEB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.61:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4FF2E49-7561-461A-98BD-4778C6764020",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.62:*:*:*:*:*:*:*",
              "matchCriteriaId": "4168D220-61A9-4E9F-A5A8-4832822E35EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.63:*:*:*:*:*:*:*",
              "matchCriteriaId": "253631B3-8A0C-48DC-851A-F5A6AB490BCB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.64:*:*:*:*:*:*:*",
              "matchCriteriaId": "1266BD64-E19D-4686-9E00-42CC9AF94756",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.65:*:*:*:*:*:*:*",
              "matchCriteriaId": "C62BCA03-A187-432B-B2B3-40DE99A9986C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.66:*:*:*:*:*:*:*",
              "matchCriteriaId": "92762951-6F9E-426D-8157-55C65A561417",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.67:*:*:*:*:*:*:*",
              "matchCriteriaId": "00AFDEF5-5E42-4BF6-8EC6-FE7FCD4DD4AC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.68:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A4B3DA2-9ECB-454D-8775-9571B158007F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.69:*:*:*:*:*:*:*",
              "matchCriteriaId": "A041E262-E36F-44C3-B83B-2E79653B74EE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.70:*:*:*:*:*:*:*",
              "matchCriteriaId": "333D0BA1-7676-417D-BB92-AAA1AAED2D0A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.71:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF449EC2-A6F2-405F-BEE7-0516E092E6F3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.72:*:*:*:*:*:*:*",
              "matchCriteriaId": "840C5668-D951-4A62-B555-EB3D91A08B61",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.73:*:*:*:*:*:*:*",
              "matchCriteriaId": "BC715625-C4E7-49AC-9F3E-7306114878D4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.74:*:*:*:*:*:*:*",
              "matchCriteriaId": "C8834643-F682-4FC1-93DE-BE4754E993AD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:0.75:*:*:*:*:*:*:*",
              "matchCriteriaId": "42DC59A0-4BD8-42AC-B2E0-BFC32FCE7396",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector."
    },
    {
      "lang": "es",
      "value": "La funcionalidad de temas de iconos gestuales (smileys) de Gaim anteriores a 0.82 permite a atacantes remotos ejecutar comandos de su elecci\u00f3n mediante metacaract\u00e9res de shell en el nombre del fichero o del fichero tar que es arrastrado al selector del icono."
    }
  ],
  "id": "CVE-2004-0784",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2004-10-20T04:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://gaim.sourceforge.net/security/?id=1"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.fedoranews.org/updates/FEDORA-2004-278.shtml"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.fedoranews.org/updates/FEDORA-2004-279.shtml"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2004-400.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17144"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10008"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://gaim.sourceforge.net/security/?id=1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.fedoranews.org/updates/FEDORA-2004-278.shtml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.fedoranews.org/updates/FEDORA-2004-279.shtml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2004-400.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17144"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10008"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.