CVE-2004-0494
Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote...
Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.
Exploit likelihood
What each source reports
NVD Score used
Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.
- Record
CVE-2004-0494- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.
- Record
CVE-2004-0494- Updated
- 2026-11-02
EUVDEUVD-2004-0493 No score
Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.
- Record
EUVD-2004-0493- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7wfm-r8jm-499h No score
Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote...
Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.
- Record
GHSA-7wfm-r8jm-499h- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gnome-vfs2Red Hat:enterprise_linux:3::as |
before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2-develRed Hat:enterprise_linux:3::as |
before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2Red Hat:enterprise_linux:3::desktop |
before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2-develRed Hat:enterprise_linux:3::desktop |
before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2Red Hat:enterprise_linux:3::es |
before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2-develRed Hat:enterprise_linux:3::es |
before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2Red Hat:enterprise_linux:3::ws |
before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2-develRed Hat:enterprise_linux:3::ws |
before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0494 is a high vulnerability (CVSS 7.5) in Avaya Cvlan, published August 5, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.62%, the 76th percentile. Fixed in gnome-vfs2 0:2.2.5-2E.1.
References
bugzilla.fedora.us/show_bug.cgi?id=1944
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9854
redhat.com/support/errata/RHSA-2004-373.html
exchange.xforce.ibmcloud.com/vulnerabilities/16897
rpmfind.net/linux/RPM/suse/9.3/i386/suse/i586/gnome-vfs-1.0.5-816.2.i586.html
nvd.nist.gov/vuln/detail/CVE-2004-0494
Show 7 moreShow less
github.com/advisories/GHSA-7wfm-r8jm-499h
access.redhat.com/errata/RHSA-2004:373
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_373.json
bugzilla.redhat.com/show_bug.cgi?id=1617212
cve.org/CVERecord?id=CVE-2004-0494