CVE-2004-1855

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Dark Age of Camelot before 1.68 live patch does not sign the RSA public key, which could allow remote malicious servers to gain sensitive information via a man-in-the-middle attack.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://capnbry.net/daoc/advisory20040323/Exploit, Vendor Advisory
http://lists.netsys.com/pipermail/full-disclosure/2004-March/019212.html
http://marc.info/?l=bugtraq&m=108016932816707&w=2
http://www.securityfocus.com/bid/9960Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15597
http://capnbry.net/daoc/advisory20040323/Exploit, Vendor Advisory
http://lists.netsys.com/pipermail/full-disclosure/2004-March/019212.html
http://marc.info/?l=bugtraq&m=108016932816707&w=2
http://www.securityfocus.com/bid/9960Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15597

Timeline

Published: Mar 23, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-18565.0devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files CVE-2004-18572.1Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files v CVE-2004-18585.0HP Web Jetadmin 7.5.2546 allows remote attackers to cause a denial of service (crash) via a malformed request, possibly due to a stricmp() e CVE-2004-18595.0Directory traversal vulnerability in Trend Micro Interscan Web Viruswall in InterScan VirusWall 3.5x allows remote attackers to read arbitra CVE-2004-18605.0Buffer overflow in Check Point SmartDashboard in Check Point NG AI R54 and R55 allows remote authenticated users to cause a denial of servic CVE-2004-18614.6Invision NetSupport School Pro uses a weak encryption algorithm to encrypt passwords, which allows local users to obtain passwords.CVE-2004-18624.3Multiple cross-site scripting (XSS) vulnerabilities in Extreme Messageboard (XMB) 1.8 SP3 and 1.9 beta allow remote attackers to inject arbi CVE-2004-18634.3Multiple cross-site scripting (XSS) vulnerabilities in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allow remote attackers to i CVE-2004-18647.5SQL injection vulnerability in Extreme Messageboard (XMB) 1.9 beta allows remote attackers to execute arbitrary SQL commands via the restric CVE-2004-18654.8Cross-site scripting (XSS) vulnerability in the administration panel in bBlog 0.7.2 allows remote authenticated users with superuser privile CVE-2004-18665.0nstxd in Nstx 1.1 beta3 and earlier allows remote attackers to cause a denial of service (crash) via a large packet, which triggers a null d CVE-2004-18674.3Cross-site scripting (XSS) vulnerability in guest.cgi in Fresh Guest Book allows remote attackers to inject arbitrary web script or HTML via