CVE-2004-2705
Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote...
Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets.
- Record
CVE-2004-2705- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets.
- Record
CVE-2004-2705- Updated
- 2026-11-02
EUVDEUVD-2004-2695 No score
Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets.
- Record
EUVD-2004-2695- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rrwg-cv62-hrxc No score
Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote...
Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets.
- Record
GHSA-rrwg-cv62-hrxc- Updated
- 2026-11-02
OSV No score
Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets.
- Record
CVE-2004-2705- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-2705 No score
Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets.
- Record
DEBIAN-CVE-2004-2705- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-2705 is a medium vulnerability (CVSS 5.0) in Pvpgn, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.44%, the 73rd percentile. Fixed in pvpgn 1.6.4+20040826-1.