« Volver al listado

CVE-2004-0604

Estado: ModificadaMedia (5)—

El cliente y servidor HTTP de giFT-FastTrack 0.8.6 y anteriores permite a atacantes remotos causar una denegación de servicio (caída), posiblemente mediante una consulta de búsqueda vacía, lo que dispara una desreferencia de puntero NULL.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Gentoo — LinuxGift-fasttrack — Gift-fasttrack

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2004-0604",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2004-12-06T05:00:00.000",
  "references": [
    {
      "url": "http://developer.berlios.de/bugs/?func=detailbug&bug_id=1573&group_id=809",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://gift-fasttrack.berlios.de/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/11941/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200406-19.xml",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/10604",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16508",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://developer.berlios.de/bugs/?func=detailbug&bug_id=1573&group_id=809",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://gift-fasttrack.berlios.de/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/11941/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200406-19.xml",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/10604",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16508",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service (crash), possibly via an empty search query, which triggers a NULL dereference."
    },
    {
      "lang": "es",
      "value": "El cliente y servidor HTTP de giFT-FastTrack 0.8.6 y anteriores permite a atacantes remotos causar una denegación de servicio (caída), posiblemente mediante una consulta de búsqueda vacía, lo que dispara una desreferencia de puntero NULL."
    }
  ],
  "lastModified": "2026-06-16T22:05:58.530",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gift-fasttrack:gift-fasttrack:0.8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CB437534-BD0F-462E-862B-775047FABB64"
            },
            {
              "criteria": "cpe:2.3:a:gift-fasttrack:gift-fasttrack:0.8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3AD16718-C370-4CA0-B6F5-F1F9264A3C90"
            },
            {
              "criteria": "cpe:2.3:a:gift-fasttrack:gift-fasttrack:0.8.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21C162E1-C3CD-4F04-8CFB-3360EDE0ADB3"
            },
            {
              "criteria": "cpe:2.3:a:gift-fasttrack:gift-fasttrack:0.8.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "827DF368-F159-4F39-ADB0-21A3BD4A987B"
            },
            {
              "criteria": "cpe:2.3:a:gift-fasttrack:gift-fasttrack:0.8.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "797CE73B-BB47-4C7D-9DEC-CD68678E84D3"
            },
            {
              "criteria": "cpe:2.3:a:gift-fasttrack:gift-fasttrack:0.8.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0029E52F-CDCC-4371-92C5-5AC974EACB7A"
            },
            {
              "criteria": "cpe:2.3:a:gift-fasttrack:gift-fasttrack:0.8.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3582C842-6940-4C5D-B2CA-3221114089B8"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}