CVE-2004-1456: Cvstrac vulnerability

CCvstrac · Cvstrac

filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.

7.5 CVSS 2.0 High EPSS 14% · top 3.6%

7.5CVSS 2.0 base score

14%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

16References, 6 tagged exploit

16 Jun 2026Last modified by NVD

Description

filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

CCvstrac Cvstrac

References

Link	Tags
http://marc.info/?l=bugtraq&m=109173359428253&w=2
http://secunia.com/advisories/12090/	Patch
http://www.cvstrac.org/cvstrac/chngview?cn=316	Patch
http://www.cvstrac.org/cvstrac/tktview?tn=339	Exploit
http://www.kb.cert.org/vuls/id/770816	Third Party AdvisoryUS Government Resource
http://www.osvdb.org/8373	Exploit
http://www.securityfocus.com/bid/10878	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/16929
http://marc.info/?l=bugtraq&m=109173359428253&w=2
http://secunia.com/advisories/12090/	Patch
http://www.cvstrac.org/cvstrac/chngview?cn=316	Patch
http://www.cvstrac.org/cvstrac/tktview?tn=339	Exploit
http://www.kb.cert.org/vuls/id/770816	Third Party AdvisoryUS Government Resource
http://www.osvdb.org/8373	Exploit
http://www.securityfocus.com/bid/10878	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/16929

Track CVE-2004-1456 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

4.3CVE-2007-0347Cvstrac vulnerabilityThe is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the "'" (quote) character, which allows remote authenticated user…EPSS 3.7%29 Jan 2007 4.3CVE-2004-1146Cvstrac vulnerabilityMultiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for CVSTrac before 1.1.5 allow remote attackers to inject arbitrary…EPSS 1.4%31 Dec 2004

Source: NIST National Vulnerability Database (record CVE-2004-1456), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.