CVE catalog

CVE-2004-2705

pvpgn: CVE-2004-2705

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.44% · Oct 25, 2026

Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpvpgnsid1.99.7.2.1+dfsg-5fixed
Debianpvpgnforky1.99.7.2.1+dfsg-5fixed
Debianpvpgntrixie1.99.7.2.1+dfsg-2fixed
Debianpvpgnbookworm1.8.5-3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpvpgnsourcesid1.6.4+20040826-1not yet assignedNot reportedNot reported
Debianpvpgnsourceforky1.6.4+20040826-1not yet assignedNot reportedNot reported
Debianpvpgnsourcetrixie1.6.4+20040826-1not yet assignedNot reportedNot reported
Debianpvpgnsourcebookworm1.6.4+20040826-1not yet assignedNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [pvpgn]Fixed

    Source package: [pvpgn]

    Details (2)

    • 1.8.5-3+b1 · amd64 · bookworm

      Fixed · Fixed: 1.6.4+20040826-1

      dsa · pvpgn · debian · bookworm; dsa · pvpgn · debian · 12

    • 1.8.5-3+b1 · arm64 · bookworm

      Fixed · Fixed: 1.6.4+20040826-1

      dsa · pvpgn · debian · bookworm; dsa · pvpgn · debian · 12

[Debian 13 (Trixie)]

  • [pvpgn]Fixed
    Details (2)

    • 1.99.7.2.1+dfsg-2 · amd64 · trixie

      Fixed · Fixed: 1.6.4+20040826-1

      dsa · pvpgn · debian · 13

    • 1.99.7.2.1+dfsg-2 · arm64 · trixie

      Fixed · Fixed: 1.6.4+20040826-1

      dsa · pvpgn · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]