CVE-2004-2705 Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq...
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pvpgn | <= 1.6.3 | No fix listed |
| pvpgn | = 1.6.0 | No fix listed |
| pvpgn | = 1.6.1 | No fix listed |
| pvpgn | = 1.6.2 | No fix listed |
| debian/pvpgn(Debian:12) | < 1.6.4+20040826-1 | 1.6.4+20040826-1 |
| debian/pvpgn(Debian:13) | < 1.6.4+20040826-1 | 1.6.4+20040826-1 |
| debian/pvpgn(Debian:14) | < 1.6.4+20040826-1 | 1.6.4+20040826-1 |
References
- forums.pvpgn.org
- 12360 third-party-advisory vendor-advisory
- 1011050 vdb-entry
- 9144 vdb-entry
- 11035 vdb-entry
- pvpgn-statsreq-info-disclosure(17094) vdb-entry
- Debian Security Tracker CVE-2004-2705 vendor-advisory