CVE-2004-0455
Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via...
CVE-2004-0455 is a high vulnerability (CVSS 7.2) in Www-sql Project Www-sql, published June 19, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.52%, the 44th percentile. Fixed in www-sql 0.5.7-17woody1.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 0.52%EPSS, 44th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.5.7-17woody1www-sql
Description
Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
www-sqlDebian:3.0 | before 0.5.7-17woody1, plus listed versions 0.5.0-50.5.5-10.5.7-130.5.7-4 | 0.5.7-17woody1 |
What each source reports
NVD Score used
Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql.
- Record
CVE-2004-0455- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql.
- Record
CVE-2004-0455- Updated
- 2026-11-02
EUVDEUVD-2004-0454No score
Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql.
- Record
EUVD-2004-0454- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-23h9-h5hh-w97xNo score
Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via...
Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql.
- Record
GHSA-23h9-h5hh-w97x- Weakness
- CWE-120
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.