CVE-2004-0838

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

Lexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR encryption, which allows local users to read the password directly from the device and access the password protected part of the drive.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Sep 13, 2004
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2004

CVE-2004-08395.0Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a CVE-2004-084010.0The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit ECVE-2004-08415.0Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use draCVE-2004-08427.5Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash CVE-2004-08435.0Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and tCVE-2004-08445.0Internet Explorer 6 on Double Byte Character Set (DBCS) systems allows remote attackers to alter displayed address bars and spoof web pages CVE-2004-08456.4Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof contentCVE-2004-08467.5Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a mCVE-2004-08479.8The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricteCVE-2004-08487.5Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing longCVE-2004-08495.0Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled wiCVE-2004-08507.2Star before 1.5_alpha46 does not drop the effective user ID (euid) before calling external programs, which could allow local users to gain p
CVE-2004-0838: Low severity, CVSS 2.1 | Vulnix