CVE-2004-2440
Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to...
Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (username or password) of other users.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (username or password) of other users.
- Record
CVE-2004-2440- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE ListNo score
Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (username or password) of other users.
- Record
CVE-2004-2440- Updated
- 2026-11-02
EUVDEUVD-2004-2431No score
Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (username or password) of other users.
- Record
EUVD-2004-2431- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8rj6-3cpv-6c7cNo score
Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to...
Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (username or password) of other users.
- Record
GHSA-8rj6-3cpv-6c7c- Updated
- 2026-11-02
OSVNo score
Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (username or password) of other users.
- Record
CVE-2004-2440- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-2440No score
Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (username or password) of other users.
- Record
DEBIAN-CVE-2004-2440- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
proxytunnelDebian:12 | before 1.2.0-1 | 1.2.0-1 |
proxytunnelDebian:13 | before 1.2.0-1 | 1.2.0-1 |
proxytunnelDebian:14 | before 1.2.0-1 | 1.2.0-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-2440 is a low vulnerability (CVSS 2.1) in Proxytunnel, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. Fixed in proxytunnel 1.2.0-1.
References
securitytracker.com/id?1011486
securityfocus.com/bid/11299
sourceforge.net/project/shownotes.php?release_id=271699
exchange.xforce.ibmcloud.com/vulnerabilities/17566
secunia.com/advisories/12685
nvd.nist.gov/vuln/detail/CVE-2004-2440
github.com/advisories/GHSA-8rj6-3cpv-6c7c
security-tracker.debian.org/tracker/CVE-2004-2440