CVE-2004-2705: Pvpgn

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets.

Affected products

• Pvpgn Pvpgn: up to and including 1.6.3; version 1.6.0 only; version 1.6.1 only; version 1.6.2 only

Published 2004-12-31. Last modified 2026-06-16.