Search
Find a vulnerability
Search criteria
6 vulnerabilities by yatsoft
VAR-200412-1188
Vulnerability from variot - Updated: 2025-04-03 22:30Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm. A vulnerability has been identified in the YaSoft Switch Off software package when handling message requests. The buffer overrun condition exists in the 'swnet.dll' module of the software due to insufficient bounds checking performed by the affected component. The overflow may be caused by sending an excessively long 'message' parameter to the application. This may make it possible for a remote user to execute arbitrary code through a vulnerable server. Switch Off is an easy-to-use tray-based system tool that automates frequently used operations, such as shutting down or restarting a computer, closing a dial-up connection, and more. A remote attacker can use this vulnerability to overflow the buffer of the service program. Carefully submitting data may execute arbitrary instructions on the system with the SYSTEM process privilege. The problem exists in the action.htm script
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200412-1188",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "1.0"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "2.2"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "1.1"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "2.1"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "1.2"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "1.8"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "0.7"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "2.0"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "1.9"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "2.3"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.0,
"vendor": "yatsoft",
"version": "1.7"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.0,
"vendor": "yatsoft",
"version": "1.5.1"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.0,
"vendor": "yatsoft",
"version": "1.6"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.0,
"vendor": "yatsoft",
"version": "1.3"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.0,
"vendor": "yatsoft",
"version": "1.4"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.0,
"vendor": "yatsoft",
"version": "1.5"
},
{
"model": "switch off",
"scope": "eq",
"trust": 0.3,
"vendor": "y soft",
"version": "2.3"
}
],
"sources": [
{
"db": "BID",
"id": "9340"
},
{
"db": "CNNVD",
"id": "CNNVD-200412-1166"
},
{
"db": "NVD",
"id": "CVE-2004-1793"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Peter Winter-Smith\u203b peter4020@hotmail.com",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200412-1166"
}
],
"trust": 0.6
},
"cve": "CVE-2004-1793",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2004-1793",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-10223",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2004-1793",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-200412-1166",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-10223",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-10223"
},
{
"db": "CNNVD",
"id": "CNNVD-200412-1166"
},
{
"db": "NVD",
"id": "CVE-2004-1793"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm. A vulnerability has been identified in the YaSoft Switch Off software package when handling message requests. The buffer overrun condition exists in the \u0027swnet.dll\u0027 module of the software due to insufficient bounds checking performed by the affected component. The overflow may be caused by sending an excessively long \u0027message\u0027 parameter to the application. This may make it possible for a remote user to execute arbitrary code through a vulnerable server. Switch Off is an easy-to-use tray-based system tool that automates frequently used operations, such as shutting down or restarting a computer, closing a dial-up connection, and more. A remote attacker can use this vulnerability to overflow the buffer of the service program. Carefully submitting data may execute arbitrary instructions on the system with the SYSTEM process privilege. The problem exists in the action.htm script",
"sources": [
{
"db": "NVD",
"id": "CVE-2004-1793"
},
{
"db": "BID",
"id": "9340"
},
{
"db": "VULHUB",
"id": "VHN-10223"
}
],
"trust": 1.26
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-10223",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-10223"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "BID",
"id": "9340",
"trust": 2.0
},
{
"db": "NVD",
"id": "CVE-2004-1793",
"trust": 1.7
},
{
"db": "SECTRACK",
"id": "1008581",
"trust": 1.7
},
{
"db": "OSVDB",
"id": "3309",
"trust": 1.7
},
{
"db": "SECUNIA",
"id": "10521",
"trust": 1.7
},
{
"db": "CNNVD",
"id": "CNNVD-200412-1166",
"trust": 0.7
},
{
"db": "BUGTRAQ",
"id": "20040102 SWITCH OFF MULTIPLE VULNERABILITIES",
"trust": 0.6
},
{
"db": "NSFOCUS",
"id": "5877",
"trust": 0.6
},
{
"db": "XF",
"id": "14124",
"trust": 0.6
},
{
"db": "SEEBUG",
"id": "SSVID-77270",
"trust": 0.1
},
{
"db": "EXPLOIT-DB",
"id": "23509",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-10223",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-10223"
},
{
"db": "BID",
"id": "9340"
},
{
"db": "CNNVD",
"id": "CNNVD-200412-1166"
},
{
"db": "NVD",
"id": "CVE-2004-1793"
}
]
},
"id": "VAR-200412-1188",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-10223"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-03T22:30:46.455000Z",
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2004-1793"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/9340"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/archive/1/348693"
},
{
"trust": 1.7,
"url": "http://www.elitehaven.net/switchoff.txt"
},
{
"trust": 1.7,
"url": "http://www.osvdb.org/3309"
},
{
"trust": 1.7,
"url": "http://securitytracker.com/id?1008581"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/10521"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14124"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/14124"
},
{
"trust": 0.6,
"url": "http://www.nsfocus.net/vulndb/5877"
},
{
"trust": 0.3,
"url": "http://yasoft.km.ru/eng/switchoff/"
},
{
"trust": 0.3,
"url": "/archive/1/348693"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-10223"
},
{
"db": "BID",
"id": "9340"
},
{
"db": "CNNVD",
"id": "CNNVD-200412-1166"
},
{
"db": "NVD",
"id": "CVE-2004-1793"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-10223"
},
{
"db": "BID",
"id": "9340"
},
{
"db": "CNNVD",
"id": "CNNVD-200412-1166"
},
{
"db": "NVD",
"id": "CVE-2004-1793"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2004-12-31T00:00:00",
"db": "VULHUB",
"id": "VHN-10223"
},
{
"date": "2004-01-02T00:00:00",
"db": "BID",
"id": "9340"
},
{
"date": "2004-01-02T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200412-1166"
},
{
"date": "2004-12-31T05:00:00",
"db": "NVD",
"id": "CVE-2004-1793"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-07-11T00:00:00",
"db": "VULHUB",
"id": "VHN-10223"
},
{
"date": "2004-01-02T00:00:00",
"db": "BID",
"id": "9340"
},
{
"date": "2005-10-20T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200412-1166"
},
{
"date": "2025-04-03T01:03:51.193000",
"db": "NVD",
"id": "CVE-2004-1793"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200412-1166"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "YaSoft Switch SendMsg Remote buffer overflow vulnerability",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200412-1166"
}
],
"trust": 0.6
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Boundary Condition Error",
"sources": [
{
"db": "BID",
"id": "9340"
},
{
"db": "CNNVD",
"id": "CNNVD-200412-1166"
}
],
"trust": 0.9
}
}
VAR-200412-1187
Vulnerability from variot - Updated: 2025-04-03 22:30swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a long packet with two CRLF sequences to the service management port (TCP 8000). This may make it possible for a remote user to deny service to legitimate users of the service. Switch Off is an easy-to-use tray-based system tool that automates frequently used operations, such as shutting down or restarting a computer, closing a dial-up connection, and more. The problematic code exists in \'\'swnet.dll\'\', this vulnerability can consume a lot of CPU and crash the program
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200412-1187",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "1.0"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "1.5"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "1.1"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "1.2"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "1.4"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "0.7"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "1.3"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "1.5.1"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "1.6"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.6,
"vendor": "yatsoft",
"version": "1.7"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.0,
"vendor": "yatsoft",
"version": "1.9"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.0,
"vendor": "yatsoft",
"version": "2.3"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.0,
"vendor": "yatsoft",
"version": "1.8"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.0,
"vendor": "yatsoft",
"version": "2.0"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.0,
"vendor": "yatsoft",
"version": "2.1"
},
{
"model": "switch off",
"scope": "eq",
"trust": 1.0,
"vendor": "yatsoft",
"version": "2.2"
},
{
"model": "switch off",
"scope": "eq",
"trust": 0.3,
"vendor": "y soft",
"version": "2.3"
}
],
"sources": [
{
"db": "BID",
"id": "9339"
},
{
"db": "CNNVD",
"id": "CNNVD-200412-321"
},
{
"db": "NVD",
"id": "CVE-2004-1792"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Peter Winter-Smith\u203b peter4020@hotmail.com",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200412-321"
}
],
"trust": 0.6
},
"cve": "CVE-2004-1792",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CVE-2004-1792",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "VHN-10222",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2004-1792",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-200412-321",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-10222",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-10222"
},
{
"db": "CNNVD",
"id": "CNNVD-200412-321"
},
{
"db": "NVD",
"id": "CVE-2004-1792"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a long packet with two CRLF sequences to the service management port (TCP 8000). This may make it possible for a remote user to deny service to legitimate users of the service. Switch Off is an easy-to-use tray-based system tool that automates frequently used operations, such as shutting down or restarting a computer, closing a dial-up connection, and more. The problematic code exists in \\\u0027\\\u0027swnet.dll\\\u0027\\\u0027, this vulnerability can consume a lot of CPU and crash the program",
"sources": [
{
"db": "NVD",
"id": "CVE-2004-1792"
},
{
"db": "BID",
"id": "9339"
},
{
"db": "VULHUB",
"id": "VHN-10222"
}
],
"trust": 1.26
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-10222",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-10222"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "BID",
"id": "9339",
"trust": 2.0
},
{
"db": "SECTRACK",
"id": "1008581",
"trust": 1.7
},
{
"db": "SECUNIA",
"id": "10521",
"trust": 1.7
},
{
"db": "NVD",
"id": "CVE-2004-1792",
"trust": 1.7
},
{
"db": "CNNVD",
"id": "CNNVD-200412-321",
"trust": 0.7
},
{
"db": "BUGTRAQ",
"id": "20040102 SWITCH OFF MULTIPLE VULNERABILITIES",
"trust": 0.6
},
{
"db": "NSFOCUS",
"id": "5876",
"trust": 0.6
},
{
"db": "XF",
"id": "14123",
"trust": 0.6
},
{
"db": "EXPLOIT-DB",
"id": "23508",
"trust": 0.1
},
{
"db": "SEEBUG",
"id": "SSVID-77269",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-10222",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-10222"
},
{
"db": "BID",
"id": "9339"
},
{
"db": "CNNVD",
"id": "CNNVD-200412-321"
},
{
"db": "NVD",
"id": "CVE-2004-1792"
}
]
},
"id": "VAR-200412-1187",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-10222"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-03T22:30:46.427000Z",
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2004-1792"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/9339"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/archive/1/348693"
},
{
"trust": 1.7,
"url": "http://www.elitehaven.net/switchoff.txt"
},
{
"trust": 1.7,
"url": "http://securitytracker.com/id?1008581"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/10521"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14123"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/14123"
},
{
"trust": 0.6,
"url": "http://www.nsfocus.net/vulndb/5876"
},
{
"trust": 0.3,
"url": "http://yasoft.km.ru/eng/switchoff/"
},
{
"trust": 0.3,
"url": "/archive/1/348693"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-10222"
},
{
"db": "BID",
"id": "9339"
},
{
"db": "CNNVD",
"id": "CNNVD-200412-321"
},
{
"db": "NVD",
"id": "CVE-2004-1792"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-10222"
},
{
"db": "BID",
"id": "9339"
},
{
"db": "CNNVD",
"id": "CNNVD-200412-321"
},
{
"db": "NVD",
"id": "CVE-2004-1792"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2004-12-31T00:00:00",
"db": "VULHUB",
"id": "VHN-10222"
},
{
"date": "2004-01-02T00:00:00",
"db": "BID",
"id": "9339"
},
{
"date": "2004-01-02T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200412-321"
},
{
"date": "2004-12-31T05:00:00",
"db": "NVD",
"id": "CVE-2004-1792"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-07-11T00:00:00",
"db": "VULHUB",
"id": "VHN-10222"
},
{
"date": "2004-01-02T00:00:00",
"db": "BID",
"id": "9339"
},
{
"date": "2005-10-20T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200412-321"
},
{
"date": "2025-04-03T01:03:51.193000",
"db": "NVD",
"id": "CVE-2004-1792"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200412-321"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "YaSoft Switch Off Oversized Remote Denial of Service Attack Vulnerability",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200412-321"
}
],
"trust": 0.6
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200412-321"
}
],
"trust": 0.6
}
}
CVE-2004-1792 (GCVE-0-2004-1792)
Vulnerability from cvelistv5 – Published: 2005-05-10 04:00 – Updated: 2024-08-08 01:00
VLAI
EPSS
VEX
Summary
swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a long packet with two CRLF sequences to the service management port (TCP 8000).
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/9339 | vdb-entryx_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.elitehaven.net/switchoff.txt | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/348693 | mailing-listx_refsource_BUGTRAQ |
| http://securitytracker.com/id?1008581 | vdb-entryx_refsource_SECTRACK |
| http://secunia.com/advisories/10521 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2004-01-02 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:00:37.444Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "9339",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/9339"
},
{
"name": "switch-off-swnet-dos(14123)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14123"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.elitehaven.net/switchoff.txt"
},
{
"name": "20040102 Switch Off Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/348693"
},
{
"name": "1008581",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1008581"
},
{
"name": "10521",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/10521"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-01-02T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a long packet with two CRLF sequences to the service management port (TCP 8000)."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "9339",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/9339"
},
{
"name": "switch-off-swnet-dos(14123)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14123"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.elitehaven.net/switchoff.txt"
},
{
"name": "20040102 Switch Off Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/348693"
},
{
"name": "1008581",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1008581"
},
{
"name": "10521",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/10521"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-1792",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a long packet with two CRLF sequences to the service management port (TCP 8000)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "9339",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/9339"
},
{
"name": "switch-off-swnet-dos(14123)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14123"
},
{
"name": "http://www.elitehaven.net/switchoff.txt",
"refsource": "MISC",
"url": "http://www.elitehaven.net/switchoff.txt"
},
{
"name": "20040102 Switch Off Multiple Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/348693"
},
{
"name": "1008581",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1008581"
},
{
"name": "10521",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/10521"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-1792",
"datePublished": "2005-05-10T04:00:00.000Z",
"dateReserved": "2005-05-04T00:00:00.000Z",
"dateUpdated": "2024-08-08T01:00:37.444Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2004-1793 (GCVE-0-2004-1793)
Vulnerability from cvelistv5 – Published: 2005-05-10 04:00 – Updated: 2024-08-08 01:00
VLAI
EPSS
VEX
Summary
Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/9340 | vdb-entryx_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.osvdb.org/3309 | vdb-entryx_refsource_OSVDB |
| http://www.elitehaven.net/switchoff.txt | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/348693 | mailing-listx_refsource_BUGTRAQ |
| http://securitytracker.com/id?1008581 | vdb-entryx_refsource_SECTRACK |
| http://secunia.com/advisories/10521 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2004-01-02 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:00:37.339Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "9340",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/9340"
},
{
"name": "switch-off-swnet-bo(14124)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14124"
},
{
"name": "3309",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/3309"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.elitehaven.net/switchoff.txt"
},
{
"name": "20040102 Switch Off Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/348693"
},
{
"name": "1008581",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1008581"
},
{
"name": "10521",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/10521"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-01-02T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "9340",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/9340"
},
{
"name": "switch-off-swnet-bo(14124)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14124"
},
{
"name": "3309",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/3309"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.elitehaven.net/switchoff.txt"
},
{
"name": "20040102 Switch Off Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/348693"
},
{
"name": "1008581",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1008581"
},
{
"name": "10521",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/10521"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-1793",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "9340",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/9340"
},
{
"name": "switch-off-swnet-bo(14124)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14124"
},
{
"name": "3309",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/3309"
},
{
"name": "http://www.elitehaven.net/switchoff.txt",
"refsource": "MISC",
"url": "http://www.elitehaven.net/switchoff.txt"
},
{
"name": "20040102 Switch Off Multiple Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/348693"
},
{
"name": "1008581",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1008581"
},
{
"name": "10521",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/10521"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-1793",
"datePublished": "2005-05-10T04:00:00.000Z",
"dateReserved": "2005-05-04T00:00:00.000Z",
"dateUpdated": "2024-08-08T01:00:37.339Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2004-1792 (GCVE-0-2004-1792)
Vulnerability from nvd – Published: 2005-05-10 04:00 – Updated: 2024-08-08 01:00
VLAI
EPSS
VEX
Summary
swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a long packet with two CRLF sequences to the service management port (TCP 8000).
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/9339 | vdb-entryx_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.elitehaven.net/switchoff.txt | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/348693 | mailing-listx_refsource_BUGTRAQ |
| http://securitytracker.com/id?1008581 | vdb-entryx_refsource_SECTRACK |
| http://secunia.com/advisories/10521 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2004-01-02 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:00:37.444Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "9339",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/9339"
},
{
"name": "switch-off-swnet-dos(14123)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14123"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.elitehaven.net/switchoff.txt"
},
{
"name": "20040102 Switch Off Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/348693"
},
{
"name": "1008581",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1008581"
},
{
"name": "10521",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/10521"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-01-02T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a long packet with two CRLF sequences to the service management port (TCP 8000)."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "9339",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/9339"
},
{
"name": "switch-off-swnet-dos(14123)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14123"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.elitehaven.net/switchoff.txt"
},
{
"name": "20040102 Switch Off Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/348693"
},
{
"name": "1008581",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1008581"
},
{
"name": "10521",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/10521"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-1792",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a long packet with two CRLF sequences to the service management port (TCP 8000)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "9339",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/9339"
},
{
"name": "switch-off-swnet-dos(14123)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14123"
},
{
"name": "http://www.elitehaven.net/switchoff.txt",
"refsource": "MISC",
"url": "http://www.elitehaven.net/switchoff.txt"
},
{
"name": "20040102 Switch Off Multiple Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/348693"
},
{
"name": "1008581",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1008581"
},
{
"name": "10521",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/10521"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-1792",
"datePublished": "2005-05-10T04:00:00.000Z",
"dateReserved": "2005-05-04T00:00:00.000Z",
"dateUpdated": "2024-08-08T01:00:37.444Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2004-1793 (GCVE-0-2004-1793)
Vulnerability from nvd – Published: 2005-05-10 04:00 – Updated: 2024-08-08 01:00
VLAI
EPSS
VEX
Summary
Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/9340 | vdb-entryx_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.osvdb.org/3309 | vdb-entryx_refsource_OSVDB |
| http://www.elitehaven.net/switchoff.txt | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/348693 | mailing-listx_refsource_BUGTRAQ |
| http://securitytracker.com/id?1008581 | vdb-entryx_refsource_SECTRACK |
| http://secunia.com/advisories/10521 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2004-01-02 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:00:37.339Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "9340",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/9340"
},
{
"name": "switch-off-swnet-bo(14124)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14124"
},
{
"name": "3309",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/3309"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.elitehaven.net/switchoff.txt"
},
{
"name": "20040102 Switch Off Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/348693"
},
{
"name": "1008581",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1008581"
},
{
"name": "10521",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/10521"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-01-02T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "9340",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/9340"
},
{
"name": "switch-off-swnet-bo(14124)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14124"
},
{
"name": "3309",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/3309"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.elitehaven.net/switchoff.txt"
},
{
"name": "20040102 Switch Off Multiple Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/348693"
},
{
"name": "1008581",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1008581"
},
{
"name": "10521",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/10521"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-1793",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "9340",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/9340"
},
{
"name": "switch-off-swnet-bo(14124)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14124"
},
{
"name": "3309",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/3309"
},
{
"name": "http://www.elitehaven.net/switchoff.txt",
"refsource": "MISC",
"url": "http://www.elitehaven.net/switchoff.txt"
},
{
"name": "20040102 Switch Off Multiple Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/348693"
},
{
"name": "1008581",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1008581"
},
{
"name": "10521",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/10521"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-1793",
"datePublished": "2005-05-10T04:00:00.000Z",
"dateReserved": "2005-05-04T00:00:00.000Z",
"dateUpdated": "2024-08-08T01:00:37.339Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}