CVE-2004-0039

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3 allows remote attackers to execute arbitrary code via HTTP requests that cause format string specifiers to be used in an error message, as demonstrated using the scheme of a URI.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Mar 3, 2004
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2004

CVE-2004-004010.0Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 42CVE-2004-00417.5The mod_auth_shadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, which could allow remoteCVE-2004-00425.0vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote attackers to identiCVE-2004-00437.5Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service (crash) and possibly CVE-2004-00447.5Cisco Personal Assistant 1.4(1) and 1.4(2) disables password authentication when "Allow Only Cisco CallManager Users" is enabled and the CorCVE-2004-00457.5Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arCVE-2004-00464.3Cross-site scripting (XSS) vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script or HTML via a GET reqCVE-2004-00474.6Multiple programs in trr19 1.0 do not properly drop privileges before executing a system command, which could allow local users to gain privCVE-2004-00496.8Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to thCVE-2004-00505.0Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web CVE-2004-00517.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use noCVE-2004-00527.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use no
CVE-2004-0039: Critical severity, CVSS 10.0 | Vulnix