CVE-2004-1745

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Buffer overflow in Painkiller 1.3.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=109339761608821&w=2
http://secunia.com/advisories/12367Vendor Advisory
http://www.securityfocus.com/bid/11029Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17101
http://marc.info/?l=bugtraq&m=109339761608821&w=2
http://secunia.com/advisories/12367Vendor Advisory
http://www.securityfocus.com/bid/11029Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17101

Timeline

Published: Aug 24, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-17464.3Cross-site scripting (XSS) vulnerability in index.php in PHP Code Snippet Library allows remote attackers to inject arbitrary web script or CVE-2004-17474.3Cross-site scripting (XSS) vulnerability in NetworkEverywhere NR041 running firmware 1.2 Release 03 allows remote attackers to inject arbitr CVE-2004-17482.1NtRegmon before 6.12 allows local users to cause a denial of service (crash), while NtRegmon is running, via invalid pointers to hook functi CVE-2004-17495.0Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing configuration, allows remote attacke CVE-2004-17505.0RealVNC 4.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of connections to port 5900.CVE-2004-17515.0Ground Control II: Operation Exodus 1.0.0.7 and earlier allows remote servers to cause a denial of service (client or server crash) via a la CVE-2004-17527.5Stack-based buffer overflow in Gaucho 1.4 Build 145 allows remote attackers to execute arbitrary code via a POP3 email with a long Content-T CVE-2004-17532.6The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled,CVE-2004-17545.0The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS ser CVE-2004-17557.5The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to conne CVE-2004-17565.0BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may CVE-2004-17574.6BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users