Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2004-0630 | First vendor Publication | 2004-08-18 |
| Vendor | Cve | Last vendor Modification | 2024-11-20 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 10 | Attack Range | Network |
| Cvss Impact Score | 10 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters ("`" or backtick) in the filename of the PDF file that is provided to the uudecode command. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0630 |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 3 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2008-09-24 | Name : Gentoo Security Advisory GLSA 200408-14 (acroread) File : nvt/glsa_200408_14.nasl |
| 2008-09-04 | Name : FreeBSD Ports: acroread, acroread4, acroread5 File : nvt/freebsd_acroread0.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 8654 | Adobe Acrobat UUEncode Shell Metacharacter Command Execution Acrobat Reader contains a flaw that may allow a malicious user to execute arbitrary commands. The issue is triggered when Acrobat Reader tries to convert uuencoded documents into their original format. When doing so it doesn't check for backtick shell metacharacter in the filename before executing a shell command when opened. By exploiting this flaw attacker could construct a file with a name that would execute arbitrary commands resulting in a loss of integrity. |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | Adobe Acrobat Reader shell metacharacter code execution attempt RuleID : 18527 - Revision : 13 - Type : FILE-PDF |
| 2014-01-10 | Adobe Acrobat Reader shell metacharacter code execution attempt RuleID : 18526 - Revision : 6 - Type : FILE-PDF |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2004-08-30 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200408-14.nasl - Type : ACT_GATHER_INFO |
| 2004-08-26 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2004-432.nasl - Type : ACT_GATHER_INFO |
| 2004-08-12 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_acroread_509.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:22:58 |
|
| 2024-11-28 12:06:09 |
|
| 2021-05-04 12:02:22 |
|
| 2021-04-22 01:02:31 |
|
| 2020-05-23 00:15:50 |
|
| 2017-07-11 12:01:28 |
|
| 2014-02-17 10:27:45 |
|
| 2014-01-19 21:22:15 |
|
| 2013-05-11 11:42:10 |
|
