UnratedFix available
pvpgn — security advisory
Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets.
- Products
- pvpgn
- Affected versions
- Not specified
- Fixed versions
- 1.6.4+20040826-1
- CVEs
- CVE-2004-2705
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 14:23 UTC · Revision 1
Source evidence
Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets.
osv:DEBIAN-CVE-2004-2705
pvpgn
Fixed versions: 1.6.4+20040826-1
pvpgn
Fixed versions: 1.6.4+20040826-1
pvpgn
Fixed versions: 1.6.4+20040826-1
Complete source record
{
"id": "1b54585086a192b8a70ce3a574993dd89e927af6c05e527c3944664384e026fa",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2004-2705",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2004-2705",
"summary": "Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets.",
"evidence": "osv:DEBIAN-CVE-2004-2705",
"products": [
{
"name": {
"value": "pvpgn",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.6.4+20040826-1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pvpgn",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.6.4+20040826-1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pvpgn",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.6.4+20040826-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "DEBIAN-CVE-2004-2705",
"aliases": [
"DEBIAN-CVE-2004-2705"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.6.4+20040826-1"
}
]
}
],
"package": {
"name": "pvpgn",
"purl": "pkg:deb/debian/pvpgn?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2004-2705.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.6.4+20040826-1"
}
]
}
],
"package": {
"name": "pvpgn",
"purl": "pkg:deb/debian/pvpgn?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2004-2705.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.6.4+20040826-1"
}
]
}
],
"package": {
"name": "pvpgn",
"purl": "pkg:deb/debian/pvpgn?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2004-2705.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-21T15:47:26.865521154Z",
"provider": "osv",
"upstream": [
"CVE-2004-2705"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2004-2705"
]
},
"related_cves": [
{
"value": "CVE-2004-2705",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 393884,
"published_at": "2004-12-31T05:00:00+00:00"
}