CVE-2004-2433

Buffer overflow in the IsValidFile function in the ADM ActiveX control for Altnet Download Manager 4.0.0.4 and earlier, as used in Kazaa Media Desktop 1.3 through 2.6.4 and Grokkster 1.3 through 2.6, allows remote attackers to execute arbitrary code via a long bstrFilepath parameter.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/12446	Patch Vendor Advisory
http://secunia.com/advisories/12456	Vendor Advisory
http://securitytracker.com/id?1011155
http://www.osvdb.org/9549
http://www.securityfocus.com/bid/11101	Exploit Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/17221

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:altnet:altnet_download_manager::::::::
	cpe:2.3:a:altnet:altnet_download_manager:4.0.0.4:::::::*
	cpe:2.3:a:grokster:grokster:1.3:::::::*
	cpe:2.3:a:grokster:grokster:1.3.3:::::::*
	cpe:2.3:a:grokster:grokster:2.6:::::::*
	cpe:2.3:a:kazaa:kazaa_media_desktop:1.3:::::::*
	cpe:2.3:a:kazaa:kazaa_media_desktop:1.3.1:::::::*
	cpe:2.3:a:kazaa:kazaa_media_desktop:1.3.2:::::::*
	cpe:2.3:a:kazaa:kazaa_media_desktop:1.6.1:::::::*
	cpe:2.3:a:kazaa:kazaa_media_desktop:2.0:::::::*
	cpe:2.3:a:kazaa:kazaa_media_desktop:2.0.2:::::::*
	cpe:2.3:a:kazaa:kazaa_media_desktop:2.6.4:::::::*

History

No history.

Information

Published : 2004-12-31 05:00

Updated : 2017-07-11 01:31

NVD link : CVE-2004-2433

Mitre link : CVE-2004-2433

CVE.ORG link : CVE-2004-2433

JSON object : View

Products Affected

kazaa

kazaa_media_desktop

grokster

grokster

altnet

altnet_download_manager

CWE

NVD-CWE-Other

{"id": "CVE-2004-2433", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2004-12-31T05:00:00.000", "references": [{"url": "http://secunia.com/advisories/12446", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/12456", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1011155", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/9549", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/11101", "tags": ["Exploit", "Patch"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17221", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in the IsValidFile function in the ADM ActiveX control for Altnet Download Manager 4.0.0.4 and earlier, as used in Kazaa Media Desktop 1.3 through 2.6.4 and Grokkster 1.3 through 2.6, allows remote attackers to execute arbitrary code via a long bstrFilepath parameter."}], "lastModified": "2017-07-11T01:31:53.530", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:altnet:altnet_download_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75C2B3F2-8F95-4AFC-BED3-72538B93B65C", "versionEndIncluding": "4.0.0.2"}, {"criteria": "cpe:2.3:a:altnet:altnet_download_manager:4.0.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73D95E65-AC32-4798-B085-B93CA4090580"}, {"criteria": "cpe:2.3:a:grokster:grokster:1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A111C90-0690-4959-A5A1-90DD92A29B47"}, {"criteria": "cpe:2.3:a:grokster:grokster:1.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C612287-28B4-4076-9996-1612664A1197"}, {"criteria": "cpe:2.3:a:grokster:grokster:2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "20D815ED-F040-435D-A7C6-5433FCC1A98C"}, {"criteria": "cpe:2.3:a:kazaa:kazaa_media_desktop:1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6E0C9C3-7F98-4590-B225-456BDBFD3466"}, {"criteria": "cpe:2.3:a:kazaa:kazaa_media_desktop:1.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "327046D3-608E-4A9C-82E7-E47074BC9572"}, {"criteria": "cpe:2.3:a:kazaa:kazaa_media_desktop:1.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19F0B88D-8FAD-4CD8-8926-F3C8C7C1B322"}, {"criteria": "cpe:2.3:a:kazaa:kazaa_media_desktop:1.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "57925D3F-644E-4229-9F03-3B6A8A5872DE"}, {"criteria": "cpe:2.3:a:kazaa:kazaa_media_desktop:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DBE19276-D3E7-43D3-BC3E-E10F8F18028C"}, {"criteria": "cpe:2.3:a:kazaa:kazaa_media_desktop:2.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12492408-782C-4D32-8077-E2B22F987EF9"}, {"criteria": "cpe:2.3:a:kazaa:kazaa_media_desktop:2.6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FAFB7CFA-CD2E-4193-A1E7-43453AB7B619"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}