« Back to list

CVE-2004-2459

Status: ModifiedLow (2.1)—

Unknown vulnerability in gnubiff 1.2.0 and earlier allows local users to obtain passwords, related to the password table.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

GNU — Gnubiff

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2004-2459",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2004-12-31T05:00:00.000",
  "references": [
    {
      "url": "http://sourceforge.net/project/shownotes.php?group_id=94176&release_id=248016",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/7250",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sourceforge.net/project/shownotes.php?group_id=94176&release_id=248016",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/7250",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unknown vulnerability in gnubiff 1.2.0 and earlier allows local users to obtain passwords, related to the password table."
    }
  ],
  "lastModified": "2026-06-16T22:09:41.507",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gnu:gnubiff:1.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E3466790-055B-44A8-8B87-593836888623"
            },
            {
              "criteria": "cpe:2.3:a:gnu:gnubiff:1.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "77D9B9E6-3063-4E09-83C3-7E919942A84E"
            },
            {
              "criteria": "cpe:2.3:a:gnu:gnubiff:1.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F61B2BE1-9150-453B-B883-18F228EA62DC"
            },
            {
              "criteria": "cpe:2.3:a:gnu:gnubiff:1.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0BE57433-DC9C-4E9D-BAEF-C5F0CD631D5A"
            },
            {
              "criteria": "cpe:2.3:a:gnu:gnubiff:1.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D2BF350E-4935-43BD-801D-EF9DD43761D0"
            },
            {
              "criteria": "cpe:2.3:a:gnu:gnubiff:1.0.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B6B51ABD-544E-454F-B2DF-D8DE87A77A6A"
            },
            {
              "criteria": "cpe:2.3:a:gnu:gnubiff:1.0.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EDDC503A-32AF-4BF8-A3E8-7B16F3DF2A33"
            },
            {
              "criteria": "cpe:2.3:a:gnu:gnubiff:1.0.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2AB92B6C-3AD4-4703-B755-8B0077A24C1C"
            },
            {
              "criteria": "cpe:2.3:a:gnu:gnubiff:1.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "388C3F45-133F-4464-97EB-0548D1F4AD55"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}