CVE-2004-2086

Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a long query parameter.

• http://securitytracker.com/id?1008979Exploit, Vendor Advisory
• http://www.osvdb.org/5786Patch, Vendor Advisory
• http://www.sambar.com/security.htmPatch, Vendor Advisory
• http://www.securityfocus.com/archive/82/353087Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/9607Exploit, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15071
• http://securitytracker.com/id?1008979Exploit, Vendor Advisory
• http://www.osvdb.org/5786Patch, Vendor Advisory
• http://www.sambar.com/security.htmPatch, Vendor Advisory
• http://www.securityfocus.com/archive/82/353087Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/9607Exploit, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15071

Published

Feb 6, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-2080Red-M Red-Alert 2.7.5 with software 3.1 build 24 converts mu…
• CVE-2004-2081The samiftp.dll library in Sami FTP Server 1.1.3 allows loca…
• CVE-2004-2082The samiftp.dll library in Sami FTP Server 1.1.3 allows remo…
• CVE-2004-2083Opera Web Browser 7.0 through 7.23 allows remote attackers t…
• CVE-2004-2084Cross-site scripting (XSS) vulnerability in search.php in JS…
• CVE-2004-2085Multiple cross-site scripting (XSS) vulnerabilities in Brad …
• CVE-2004-2087Unknown vulnerability in SandSurfer before 1.7.0 allows remo…
• CVE-2004-2088Sophos Anti-Virus 3.78 allows remote attackers to bypass vir…
• CVE-2004-2089Matrix FTP Server allows remote attackers to cause a denial …
• CVE-2004-2090Microsoft Internet Explorer 5.0.1 through 6.0 allows remote …
• CVE-2004-2091Microsoft Baseline Security Analyzer (MBSA) 1.2 does not cor…
• CVE-2004-2092eTrust InoculateIT for Linux 6.0 uses insecure permissions f…