CVE-2004-0494
Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote...
CVE-2004-0494 is a high vulnerability (CVSS 7.5) in Avaya Cvlan, published August 5, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.62%, the 76th percentile. Fixed in gnome-vfs2 0:2.2.5-2E.1.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 1.62%EPSS, 76th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0:2.2.5-2E.1gnome-vfs2 +11 more
Description
Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gnome-vfs2Red Hat:enterprise_linux:3::as | before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2-debuginfoRed Hat:enterprise_linux:3::as | before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2-develRed Hat:enterprise_linux:3::as | before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2Red Hat:enterprise_linux:3::desktop | before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2-debuginfoRed Hat:enterprise_linux:3::desktop | before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2-develRed Hat:enterprise_linux:3::desktop | before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2Red Hat:enterprise_linux:3::es | before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2-debuginfoRed Hat:enterprise_linux:3::es | before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2-develRed Hat:enterprise_linux:3::es | before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2Red Hat:enterprise_linux:3::ws | before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2-debuginfoRed Hat:enterprise_linux:3::ws | before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
gnome-vfs2-develRed Hat:enterprise_linux:3::ws | before 0:2.2.5-2E.1 | 0:2.2.5-2E.1 |
What each source reports
NVD Score used
Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.
- Record
CVE-2004-0494- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.
- Record
CVE-2004-0494- Updated
- 2026-11-02
EUVDEUVD-2004-0493No score
Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.
- Record
EUVD-2004-0493- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7wfm-r8jm-499hNo score
Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote...
Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.
- Record
GHSA-7wfm-r8jm-499h- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
bugzilla.fedora.us/show_bug.cgi?id=1944
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9854
redhat.com/support/errata/RHSA-2004-373.html
exchange.xforce.ibmcloud.com/vulnerabilities/16897
rpmfind.net/linux/RPM/suse/9.3/i386/suse/i586/gnome-vfs-1.0.5-816.2.i586.html
nvd.nist.gov/vuln/detail/CVE-2004-0494
Show 7 moreShow less
github.com/advisories/GHSA-7wfm-r8jm-499h
access.redhat.com/errata/RHSA-2004:373
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_373.json
bugzilla.redhat.com/show_bug.cgi?id=1617212
cve.org/CVERecord?id=CVE-2004-0494