Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and…

Description

Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.

Scores

EPSS (exploitation in 30 days)

7.6% · top 5.4% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (32)

• 9489 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• DSA-434 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• RHSA-2004:032 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• SuSE-SA:2004:004 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• 3732 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• SSA:2004-026 (opens in a new tab)vendor-advisoryx_refsource_SLACKWAREx_transferred
• oval:org.mitre.oval:def:818 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• VU#871838 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
• VU#444158 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
• 20040126 Advisory 01/2004: 12 x Gaim remote overflows (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• VU#297198 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
• gaim-login-value-bo(14941) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• oval:org.mitre.oval:def:10222 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• http://ultramagnetic.sourceforge.net/advisories/001.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• GLSA-200401-04 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• 1008850 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• 20040127 Ultramagnetic Advisory #001: Multiple vulnerabilities in Gaim code (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• http://security.e-matters.de/advisories/012004.html (opens in a new tab)x_refsource_MISCx_transferred
• RHSA-2004:033 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• MDKSA-2004:006 (opens in a new tab)vendor-advisoryx_refsource_MANDRAKEx_transferred
• gaim-yahoowebpending-cookie-bo(14939) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• gaim-http-proxy-bo(14947) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• gaim-login-name-bo(14940) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• 20040126 Advisory 01/2004: 12 x Gaim remote overflows (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
• VU#527142 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
• gaim-urlparser-bo(14945) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• VU#371382 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
• gaim-yahoopacketread-keyname-bo(14943) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• CLA-2004:813 (opens in a new tab)vendor-advisoryx_refsource_CONECTIVAx_transferred
• 3731 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• VU#503030 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
• RHSA-2004:045 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2004-0006](https://trackcve.app/badge/CVE-2004-0006.svg)](https://trackcve.app/cve/CVE-2004-0006)

Record last updated 8 Aug 2024, 00:01 UTC.