Vulnerability CVE-2004-0386 - CERT Civis.Net

Vulnerability Name:

CVE-2004-0386 (CCN-15675)

Assigned:

2004-03-30

Published:

2004-03-30

Updated:

2017-07-11

Summary:

Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header.

CVSS v3 Severity:

10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: CCN
Type: BugTraq Mailing List, Tue Mar 30 2004 - 09:54:12 CST
MPlayer Security Advisory #002 - HTTP parsing vulnerability

Source: MITRE
Type: CNA
CVE-2004-0386

Source: BUGTRAQ
Type: UNKNOWN
20040330 MPlayer Security Advisory #002 - HTTP parsing vulnerability

Source: CCN
Type: SA11259
MPlayer HTTP Location Header Parsing Heap Overflow Vulnerability

Source: SECUNIA
Type: Patch, Vendor Advisory
11259

Source: GENTOO
Type: Patch, Vendor Advisory
GLSA-200403-13

Source: CCN
Type: GLSA-200403-13
Remote buffer overflow in MPlayer

Source: CCN
Type: US-CERT VU#723910
MPlayer contains a buffer overflow in the HTTP parser

Source: CERT-VN
Type: Patch, Third Party Advisory, US Government Resource
VU#723910

Source: CCN
Type: GLSA 200403-13
Remote buffer overflow in MPlayer

Source: MANDRAKE
Type: UNKNOWN
MDKSA-2004:026

Source: CONFIRM
Type: UNKNOWN
http://www.mplayerhq.hu/homepage/design6/news.html

Source: CCN
Type: OSVDB ID: 4754
MPlayer HTTP Location Header Parsing Overflow

Source: BUGTRAQ
Type: Patch, Vendor Advisory
20040330 Heap overflow in MPlayer

Source: BID
Type: Exploit, Patch
10008

Source: CCN
Type: BID-10008
MPlayer Remote HTTP Header Buffer Overflow Vulnerability

Source: CCN
Type: BID-10009
Oracle Single Sign-On Login Page Authentication Credential Disclosure Vulnerability

Source: CCN
Type: BID-1001
InterAccess TelnetD Server 4.0 Terminal Configuration Vulnerability

Source: CCN
Type: BID-10010
LinBit Technologies LINBOX Officeserver Remote Authentication Bypass Vulnerability

Source: CCN
Type: BID-10013
PHPKit Multiple HTML Injection Vulnerabilities

Source: CCN
Type: BID-10017
JamesOff QuoteEngine Multiple Parameter Unspecified SQL Injection Vulnerability

Source: CCN
Type: BID-10018
MadBMS Unspecified Login Vulnerability

Source: CCN
Type: BID-10019
Cactusoft CactuShop SQL Injection Vulnerability

Source: CCN
Type: BID-1002
Sambar Server Batch CGI Vulnerability

Source: CCN
Type: BID-10020
CactuSoft CactuShop Cross-Site Scripting Vulnerability

Source: CCN
Type: BID-10022
Roger Wilco Server UDP Datagram Handling Denial Of Service Vulnerability

Source: CCN
Type: BID-10024
Roger Wilco Information Disclosure Vulnerability

Source: CCN
Type: BID-10025
Roger Wilco Server Unauthorized Audio Stream Denial Of Service Vulnerability

Source: CCN
Type: BID-10026
ADA IMGSVR Remote Directory Listing Vulnerability

Source: CCN
Type: BID-10027
ADA IMGSVR Remote File Download Vulnerability

Source: CCN
Type: BID-10028
OpenBSD ISAKMPD Zero Payload Length Denial Of Service Vulnerability

Source: CCN
Type: BID-1003
FTPx FTP Explorer Weak Password Encryption Vulnerability

Source: CCN
Type: BID-10033
HAHTsite Scenario Server Project File Name Buffer Overrun Vulnerability

Source: CCN
Type: BID-10036
Macromedia Dreamweaver Remote User Database Access Vulnerability

Source: CCN
Type: BID-10037
SGI IRIX ftpd Multiple Denial Of Service Vulnerabilities

Source: XF
Type: UNKNOWN
mplayer-header-bo(15675)

Source: XF
Type: UNKNOWN
mplayer-header-bo(15675)

Vulnerable Configuration:

Configuration 1:

cpe:/a:mplayer:mplayer:0.90:*:*:*:*:*:*:*

OR cpe:/a:mplayer:mplayer:0.90_pre:*:*:*:*:*:*:*

OR cpe:/a:mplayer:mplayer:0.90_rc:*:*:*:*:*:*:*

OR cpe:/a:mplayer:mplayer:0.91:*:*:*:*:*:*:*

OR cpe:/a:mplayer:mplayer:1.0_pre1:*:*:*:*:*:*:*

OR cpe:/a:mplayer:mplayer:1.0_pre2:*:*:*:*:*:*:*

OR cpe:/a:mplayer:mplayer:1.0_pre3:*:*:*:*:*:*:*

Configuration 2:

cpe:/o:gentoo:linux:0.5:*:*:*:*:*:*:*

OR cpe:/o:gentoo:linux:0.7:*:*:*:*:*:*:*

OR cpe:/o:gentoo:linux:1.1a:*:*:*:*:*:*:*

OR cpe:/o:gentoo:linux:1.2:*:*:*:*:*:*:*

OR cpe:/o:gentoo:linux:1.4:*:*:*:*:*:*:*

OR cpe:/o:gentoo:linux:1.4:rc1:*:*:*:*:*:*

OR cpe:/o:gentoo:linux:1.4:rc2:*:*:*:*:*:*

OR cpe:/o:gentoo:linux:1.4:rc3:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:mplayer:mplayer:0.90_pre:*:*:*:*:*:*:*

OR cpe:/a:mplayer:mplayer:0.90_rc:*:*:*:*:*:*:*

OR cpe:/a:mplayer:mplayer:0.90:*:*:*:*:*:*:*

OR cpe:/a:mplayer:mplayer:0.91:*:*:*:*:*:*:*

OR cpe:/a:mplayer:mplayer:1.0_pre1:*:*:*:*:*:*:*

OR cpe:/a:mplayer:mplayer:1.0_pre2:*:*:*:*:*:*:*

OR cpe:/a:mplayer:mplayer:1.0_pre3:*:*:*:*:*:*:*

AND

cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20040386	V	CVE-2004-0386	2015-11-16