CVE-2004-1702

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly check the return value of the ReceiveTransaction function, which leads to a failed malloc call and triggers to a null dereference, which allows remote attackers to cause a denial of service (crash).

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

No affected versions have been published.

Timeline

Published
Aug 9, 2004
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2004

CVE-2004-17038.8Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcodeCVE-2004-17047.5WpQuiz 2.60b1 through 2.60b8 allows remote attackers to gain privileges via a direct request to adminrestore.php in the extras directory.CVE-2004-17055.0Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username.CVE-2004-17067.5The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service (device crash) and possibly execute aCVE-2004-17077.2The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execuCVE-2004-17085.0Webbsyte Chat 0.9.0 allows remote attackers to cause a denial of service (crash) via a large number of connections.CVE-2004-17092.1Datakey Rainbow iKey2032 USB token, when using the CIP client package, does not encrypt communications between the token and the driver, whiCVE-2004-17107.5page.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the url parameter.CVE-2004-17114.3Cross-site scripting (XSS) vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary web script or HTML viaCVE-2004-17124.3Cross-site scripting (XSS) vulnerability in TypePad allows remote attackers to inject arbitrary Javascript via the name parameter.CVE-2004-17132.1Unknown vulnerability in HP Process Resource Manager (PRM) C.02.01[.01] and earlier, as used by HP-UX Workload Manager (WLM), allows local uCVE-2004-17147.1BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Ful