CVE-2004-2079

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote attackers to bypass authentication by connecting from the same IP address as an active authenticated user.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://genhex.org/releases/031003.txtVendor Advisory
http://marc.info/?l=full-disclosure&m=107635119005407&w=2
http://securitytracker.com/id?1009001Exploit, Patch, Vendor Advisory
http://www.osvdb.org/3952
http://www.securiteam.com/securitynews/5SP0C0KC0A.htmlVendor Advisory
http://www.securityfocus.com/archive/1/353211Vendor Advisory
http://www.securityfocus.com/bid/9618Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15088
http://genhex.org/releases/031003.txtVendor Advisory
http://marc.info/?l=full-disclosure&m=107635119005407&w=2
http://securitytracker.com/id?1009001Exploit, Patch, Vendor Advisory
http://www.osvdb.org/3952
http://www.securiteam.com/securitynews/5SP0C0KC0A.htmlVendor Advisory
http://www.securityfocus.com/archive/1/353211Vendor Advisory
http://www.securityfocus.com/bid/9618Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15088

Timeline

Published: Feb 9, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-20805.0Red-M Red-Alert 2.7.5 with software 3.1 build 24 converts multiple spaces in a Service Set Identifier (SSID) to a single space, which preven CVE-2004-20815.0The samiftp.dll library in Sami FTP Server 1.1.3 allows local users to cause a denial of service (pmsystem.exe crash) by issuing (1) a CD co CVE-2004-20825.0The samiftp.dll library in Sami FTP Server 1.1.3 allows remote authenticated users to cause a denial of service (pmsystem.exe crash) via a G CVE-2004-20832.6Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file n CVE-2004-20844.3Cross-site scripting (XSS) vulnerability in search.php in JShop E-Commerce Server allows remote attackers to inject arbitrary web script or CVE-2004-20854.3Multiple cross-site scripting (XSS) vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers to inject arbitrary CVE-2004-20865.0Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of CVE-2004-20877.5Unknown vulnerability in SandSurfer before 1.7.0 allows remote attackers to gain access as a logged-in user.CVE-2004-20885.0Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Notification (DSN) where CVE-2004-20895.0Matrix FTP Server allows remote attackers to cause a denial of service (crash) by logging in using four spaces as the username and password CVE-2004-20905.0Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPic CVE-2004-20915.0Microsoft Baseline Security Analyzer (MBSA) 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit