Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2004-1859
Directory traversal vulnerability in Trend Micro Interscan Web Viruswall in InterScan VirusWall 3.5x allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
Affected Products: n/a
References: [{'name': '9966', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9966'}, {'name': '1009550', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009550'}, {'name': '4549', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4549'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb.trendmicro.com/solutions/search/main/search/solutionDetail.asp?solutionID=19257'}, {'name': '11215', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11215'}, {'name': '20040324 TrendMacro Interscan Viruswall Directory Traversal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108014604529316&w=2'}, {'name': 'interscan-dotdot-directory-traversal(15590)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15590'}]
CVE State: PUBLISHED
Explain CVE-2004-1860
Buffer overflow in Check Point SmartDashboard in Check Point NG AI R54 and R55 allows remote authenticated users to cause a denial of service (server disconnect) and possibly execute arbitrary code via a large filter on a column when using SmartView Tracker.
Affected Products: n/a
References: [{'name': '1009490', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009490'}, {'name': '9870', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9870'}, {'name': '4412', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4412'}, {'name': 'fw1-smartdashboard-bo(15539)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15539'}, {'name': '20040325 Check Point SmartDashboard Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108023281112510&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1861
Invision NetSupport School Pro uses a weak encryption algorithm to encrypt passwords, which allows local users to obtain passwords.
Affected Products: n/a
References: [{'name': '9981', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9981'}, {'name': '20040326 NetSupport School Pro: Password Encryption Weaknesses', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108032304932321&w=2'}, {'name': 'netsupportschoolpro-weak-encryption(15621)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15621'}]
CVE State: PUBLISHED
Explain CVE-2004-1862
Multiple cross-site scripting (XSS) vulnerabilities in Extreme Messageboard (XMB) 1.8 SP3 and 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the (1) xmbuser parameter to xmb.php, (2) folder parameter to u2u.php, (3) viewmost, replymost, or latest parameter to stats.php, (4) message or icons parameter to post.php, (5) threadlist, pagelinks, forumlist, navigation, or (6) forumdisplay parameter to forumdisplay.php.
Affected Products: n/a
References: [{'name': 'xmb-forum-multiple-xss(15654)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15654'}, {'name': '20040326 [waraxe-2004-SA#012 - Multiple vulnerabilities in XMB Forum 1.8 Partagium SP3 and 1.9 Nexus Beta]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108032355905265&w=2'}, {'name': '11230', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11230'}, {'name': '14988', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/14988'}, {'name': '14985', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/14985'}, {'name': '14983', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/14983'}, {'name': '14987', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/14987'}, {'name': '9983', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9983'}, {'name': '14986', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/14986'}, {'tags': ['x_refsource_MISC'], 'url': 'https://docs.xmbforum2.com/index.php?title=Security_Issue_History'}]
CVE State: PUBLISHED
Explain CVE-2004-1863
Multiple cross-site scripting (XSS) vulnerabilities in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allow remote attackers to inject arbitrary web script or HTML via (1) the u2uheader parameter in editprofile.php, the restrict parameter in (2) member.php, (3) misc.php, and (4) today.php, and (5) an arbitrary parameter in phpinfo.php.
Affected Products: n/a
References: [{'name': 'xmb-forum-multiple-xss(15654)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15654'}, {'name': '14989', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/14989'}, {'name': '16884', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16884'}, {'name': '20040326 [waraxe-2004-SA#012 - Multiple vulnerabilities in XMB Forum 1.8 Partagium SP3 and 1.9 Nexus Beta]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108032355905265&w=2'}, {'name': '14982', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/14982'}, {'name': '9983', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9983'}, {'name': '14991', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/14991'}, {'tags': ['x_refsource_MISC'], 'url': 'https://docs.xmbforum2.com/index.php?title=Security_Issue_History'}]
CVE State: PUBLISHED
Explain CVE-2004-1864
SQL injection vulnerability in Extreme Messageboard (XMB) 1.9 beta allows remote attackers to execute arbitrary SQL commands via the restrict parameter to (1) member.php, (2) misc.php, or (3) today.php.
Affected Products: n/a
References: [{'name': 'xmb-forum-sql-injection(15655)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15655'}, {'name': '1009561', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009561'}, {'name': '20040326 [waraxe-2004-SA#012 - Multiple vulnerabilities in XMB Forum 1.8 SP3 and 1.9 beta]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108032355905265&w=2'}, {'name': '9983', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9983'}, {'name': '16886', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16886'}, {'tags': ['x_refsource_MISC'], 'url': 'https://docs.xmbforum2.com/index.php?title=Security_Issue_History'}]
CVE State: PUBLISHED
Explain CVE-2004-1865
Cross-site scripting (XSS) vulnerability in the administration panel in bBlog 0.7.2 allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via a blog name ($blogname).  NOTE: if administrators are normally allowed to add HTML by other means, e.g. through Smarty templates, then this issue would not give any additional privileges, and thus would not be considered a vulnerability.
Affected Products: n/a
References: [{'name': 'bblog-name-xss(15635)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15635'}, {'name': '1009564', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009564'}, {'name': '10510', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10510'}, {'name': '13397', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13397'}, {'name': '20040326 bblog 0.7.2 cross site scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108034226717745&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1866
nstxd in Nstx 1.1 beta3 and earlier allows remote attackers to cause a denial of service (crash) via a large packet, which triggers a null dereference.
Affected Products: n/a
References: [{'name': '20040326 Nstxd vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108034249916453&w=2'}, {'name': 'nstx-null-dos(15638)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15638'}, {'name': '1009567', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009567'}, {'name': '9989', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9989'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nstx.dereference.de/nstx/nstx-1.1-beta4.tgz'}]
CVE State: PUBLISHED
Explain CVE-2004-1867
Cross-site scripting (XSS) vulnerability in guest.cgi in Fresh Guest Book allows remote attackers to inject arbitrary web script or HTML via the Name field.
Affected Products: n/a
References: [{'name': 'freshguestbook-guest-xss(15649)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15649'}, {'name': '20040328 vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108057935827431&w=2'}, {'name': '9995', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9995'}]
CVE State: PUBLISHED
Explain CVE-2004-1868
Stack-based buffer overflow in WinSig.exe in eSignal 7.5 and 7.6 allows remote attackers to execute arbitrary code via a long STREAMQUOTE tag.
Affected Products: n/a
References: [{'name': '20040406 Re: eSignal v7 remote buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2004-04/0056.html'}, {'name': 'esignal-specs-bo(15624)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15624'}, {'name': '9978', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9978'}, {'name': '20040325 eSignal v7 remote buffer overflow (exploit)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108025234317408&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://viziblesoft.com/insect/advisories/vz012004-esignal7.txt'}, {'name': '11222', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11222'}]
CVE State: PUBLISHED
Explain CVE-2004-1869
Etherlords I 1.07 and earlier and Etherlords II 1.03 and earlier allows remote attackers to cause a denial of service (crash) by sending a packet that specifies the size for the next packet, then sending a larger packet than specified, which causes Etherlords to read unallocated memory.
Affected Products: n/a
References: [{'name': '20040325 Remote crash in Etherlords I 1.07 and II 1.03', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108024309814423&w=2'}, {'name': 'etherlords1-packet-dos(15618)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15618'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/ethboom-adv.txt'}, {'name': '9979', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9979'}, {'name': 'etherlords2-packet-dos(15619)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15619'}]
CVE State: PUBLISHED
Explain CVE-2004-1870
Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' passwords via the (1) photo parameter to addfav.php, (2) photo parameter to comments.php, (3) credit parameter to comments.php, (4) cat parameter to index.php, (5) ppuser parameter to showgallery.php, (6) cat parameter to showgallery.php, (7) cat parameter to uploadphoto.php, (8) albumid parameter to useralbums.php, or (9) albumid parameter to useralbums.php.
Affected Products: n/a
References: [{'name': '9994', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9994'}, {'name': '20040328 PhotoPost PHP Pro Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108057790723123&w=2'}, {'name': 'photopost-php-sql-injection(15642)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15642'}, {'name': '1009571', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009571'}, {'name': '11241', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11241'}]
CVE State: PUBLISHED
Explain CVE-2004-1871
Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ppuser, (2) password, (3) stype, (4) perpage, (5) sort, (6) page, (7) si, or (8) cat parameters to showmembers.php, or the (9) photo name, (10) photo description, (11) album name, or (12) album description fields.
Affected Products: n/a
References: [{'name': '9994', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9994'}, {'name': 'photopost-php-xss(15643)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15643'}, {'name': '20040328 PhotoPost PHP Pro Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108057790723123&w=2'}, {'name': '1009571', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009571'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/03282004.php'}, {'name': '11241', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11241'}]
CVE State: PUBLISHED
Explain CVE-2004-1872
Cross-site scripting (XSS) vulnerability in WebCT Campus Edition 4.1.1.5 allows remote attackers to inject arbitrary web script or HTML via the @import URL function in a CSS style tag.
Affected Products: n/a
References: [{'name': '11242', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11242'}, {'name': '20040329 WebCT Campus Edition 4.1 - Cross site scripting using CSS @import', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108057915916365&w=2'}, {'name': 'webct-import-xss(15652)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15652'}, {'name': '9999', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9999'}]
CVE State: PUBLISHED
Explain CVE-2004-1873
SQL injection vulnerability in category.asp in A-CART Pro and A-CART 2.0 allows remote attackers to gain privileges via the catcode parameter.
Affected Products: n/a
References: [{'name': '20040329 A-CART Pro & A-CART 2.0 Input Validation Holes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108057887008983&w=2'}, {'name': '20061118 Re: A-Cart PRO SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/452023/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.aria-security.com/forum/showthread.php?t=31'}, {'name': '11236', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11236'}, {'name': '20061118 A-Cart 2.0 SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/452005/100/0/threaded'}, {'name': '20061114 A-Cart pro[ injection sql (post&get)]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/451594/100/100/threaded'}, {'name': '9997', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9997'}, {'name': '20061118 A-Cart PRO SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/452006/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://s-a-p.ca/index.php?page=OurAdvisories&id=27'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.aria-security.com/forum/showthread.php?t=32'}, {'name': 'acart-categoryasp-sql-injection(15661)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15661'}]
CVE State: PUBLISHED
Explain CVE-2004-1874
Multiple cross-site scripting (XSS) vulnerabilities in (1) deliver.asp and (2) billing.asp in A-CART Pro and A-CART 2.0 allow remote attackers to inject arbitrary web script or HTML via the user information forms.
Affected Products: n/a
References: [{'name': '20040329 A-CART Pro & A-CART 2.0 Input Validation Holes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108057887008983&w=2'}, {'name': '11236', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11236'}, {'name': '9997', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9997'}, {'name': 'acart-deliverasp-billingasp-xss(15660)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15660'}]
CVE State: PUBLISHED
Explain CVE-2004-1875
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to testfile.html, (2) file parameter to erredit.html, (3) dns parameter to dnslook.html, (4) account parameter to ignorelist.html, (5) account parameter to showlog.html, (6) db parameter to repairdb.html, (7) login parameter to doaddftp.html (8) account parameter to editmsg.htm, or (9) ip parameter to del.html.  NOTE: the dnslook.html vector was later reported to exist in cPanel 10.
Affected Products: n/a
References: [{'name': '4243', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4243'}, {'name': '20040330 Exensive cPanel Cross Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108066561608676&w=2'}, {'name': '21142', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/21142'}, {'name': '11244', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11244'}, {'name': '4215', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4215'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cirt.net/advisories/cpanel_xss.shtml'}, {'name': '4210', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4210'}, {'name': 'cpanel-multiple-scripts-xss(15671)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15671'}, {'name': '22984', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22984'}, {'name': '4211', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4211'}, {'name': 'ADV-2006-4658', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/4658'}, {'name': '10002', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10002'}, {'name': '4212', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4212'}, {'name': '4208', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4208'}, {'name': '4213', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4213'}, {'name': '4214', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4214'}, {'name': '4209', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4209'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.aria-security.com/forum/showthread.php?t=30'}]
CVE State: PUBLISHED
Explain CVE-2004-1876
The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon (clamd) before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name.
Affected Products: n/a
References: [{'name': '11253', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11253'}, {'name': 'GLSA-200405-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-03.xml'}, {'name': 'clamantivirus-virusevent-gain-privileges(15692)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15692'}, {'name': '20040330 clamd - NEVER use "%f" in your "VirusEvent"', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108066864608615&w=2'}, {'name': '10007', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10007'}]
CVE State: PUBLISHED
Explain CVE-2004-1877
The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote attackers to spoof the login page, which could allow users to inadvertently reveal their username and password.
Affected Products: n/a
References: [{'name': '20040330 Problem with customized login pages for Oracle SSO', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108067040722235&w=2'}, {'name': '10009', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10009'}, {'name': 'oracle-sso-login-spoofing(15676)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15676'}]
CVE State: PUBLISHED
Explain CVE-2004-1878
LINBOX LIN:BOX allows remote attackers to bypass authentication, obtain sensitive information, or gain access via a direct request to admin/user.pl preceded by // (double leading slash).
Affected Products: n/a
References: [{'name': '11264', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11264'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.websec.org/adv/linbit.txt.html'}, {'name': '10010', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10010'}, {'name': '20040330 Linbit linbox Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108067245401673&w=2'}, {'name': 'linbox-slashslash-security-bypass(15677)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15677'}]
CVE State: PUBLISHED
Explain CVE-2004-1879
Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows allows remote attackers to inject arbitrary web script or HTML via forum messages.
Affected Products: n/a
References: [{'name': 'phpkit-forum-message-xss(15681)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15681'}, {'name': '10013', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10013'}, {'name': '20040330 phpkit suffers (reale stupid) XSS vuln.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108067894822358&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1880
Memory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to cause a denial of service (memory consumption).
Affected Products: n/a
References: [{'name': 'CLSA-2003:685', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000685'}, {'name': '17000', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17000'}, {'name': '9203', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/9203'}]
CVE State: PUBLISHED
Explain CVE-2004-1881
SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows remote attackers to execute arbitrary SQL commands via the strItems parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.s-quadra.com/advisories/Adv-20040331.txt'}, {'name': '4785', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4785'}, {'name': '4786', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4786'}, {'name': '20040331 CactuSoft CactuShop v5.x shopping cart software multiple security', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108075059013762&w=2'}, {'name': 'cactushop-multiple-sql-injection(15686)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15686'}, {'name': '10019', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10019'}, {'name': '11272', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11272'}, {'name': '1009601', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009601'}]
CVE State: PUBLISHED
Explain CVE-2004-1882
Cross-site scripting (XSS) vulnerability in popuplargeimage.asp in CactuShop 5.x allows remote attackers to inject arbitrary web script or HTML via the strImageTag parameter.
Affected Products: n/a
References: [{'name': '4787', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4787'}, {'name': '10020', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10020'}, {'name': '20040331 CactuSoft CactuShop v5.x shopping cart software multiple security', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108075059013762&w=2'}, {'name': 'cactushop-popularlargeimageasp-xss(15687)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15687'}, {'name': '2004031 CactuSoft CactuShop v5.x shopping cart software multiple security vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/019566.html'}, {'name': '11272', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11272'}, {'name': '1009601', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009601'}]
CVE State: PUBLISHED
Explain CVE-2004-1883
Multiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 (1) allow remote authenticated users to execute arbitrary code by causing a large error string to be generated by the ALLO handler, or (2) may allow remote FTP administrators to execute arbitrary code by causing a long hostname or username to be inserted into a reply to a STAT command while a file is being transferred.
Affected Products: n/a
References: [{'name': '11206', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11206'}, {'name': '9953', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9953'}, {'name': "20040323 Think of the buffers! Won't somebody think of the buffers?!", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/358361'}, {'name': 'wsftp-allo-bo(15561)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15561'}, {'name': '20040323 ALLO ALLO WS_FTP Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108006553222397&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1884
Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access.
Affected Products: n/a
References: [{'name': '20040323 Open the WS_FTP Server backdoor to SYSTEM', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108006581418116&w=2'}, {'name': 'wftp-site-gain-priviliege(15558)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15558'}, {'name': '11206', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11206'}, {'name': '9953', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9953'}]
CVE State: PUBLISHED
Explain CVE-2004-1885
Ipswitch WS_FTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify certain iFtpSvc options that are handled by iftpmgr.exe.
Affected Products: n/a
References: [{'name': '20040323 Open the WS_FTP Server backdoor to SYSTEM', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108006581418116&w=2'}, {'name': 'wftp-site-gain-priviliege(15558)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15558'}, {'name': '11206', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11206'}, {'name': '9953', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9953'}]
CVE State: PUBLISHED
Explain CVE-2004-1887
Ada Image Server (ImgSvr) 0.4 allows remote attackers to view directories or download files via an HTTP request with a trailing %00 (null).
Affected Products: n/a
References: [{'name': '11277', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11277'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.autistici.org/fdonato/advisory/imgSvr0.4-adv.txt'}, {'name': '20040401 Index viewing in imgSvr 0.4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108083813528255&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=230023'}, {'name': '10026', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10026'}, {'name': '10027', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10027'}, {'name': 'imgsvr-obtain-information(15706)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15706'}]
CVE State: PUBLISHED
Explain CVE-2004-1888
display.cgi in Aborior Encore WebForum allows remote to execute arbitrary commands via shell metacharacters in the file variable.
Affected Products: n/a
References: [{'name': '10040', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10040'}, {'name': '20060620 display.cgi', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/437813/100/0/threaded'}, {'name': 'encore-display-command-execution(15725)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15725'}, {'name': '16831', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16831'}, {'name': '20060621 Re: display.cgi', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/437978/100/0/threaded'}, {'name': "20040403 Remote Exploit for Aborior's Encore Web Forum", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108100973820868&w=2'}, {'name': '1009652', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1009652'}]
CVE State: PUBLISHED
Explain CVE-2004-1889
Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service (hang) via a link failure with Microsoft Windows.
Affected Products: n/a
References: [{'name': '10037', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10037'}, {'name': '20040401-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc'}, {'name': 'irix-ftpd-link-dos(15722)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15722'}]
CVE State: PUBLISHED
Explain CVE-2004-1890
Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service (hang) via the PORT mode.
Affected Products: n/a
References: [{'name': 'irix-ftpd-port-dos(15723)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15723'}, {'name': '10037', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10037'}, {'name': '20040401-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc'}]
CVE State: PUBLISHED
Explain CVE-2004-1891
The ftp_syslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, possibly preventing the actions of anonymous users from being logged.
Affected Products: n/a
References: [{'name': '20040401-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc'}]
CVE State: PUBLISHED
Explain CVE-2004-1892
Stack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web server in eMule 0.42d, allows remote attackers to execute arbitrary code via a long string.
Affected Products: n/a
References: [{'name': '10039', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10039'}, {'name': 'emule-decodebase16-bo(15730)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15730'}, {'name': '11289', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11289'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.emule-project.net/home/perl/news.cgi?l=1&cat_id=22'}, {'name': '20040403 eMule v0.42d Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108100987429960&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1893
Dreamweaver MX, when "Using Driver On Testing Server" or "Using DSN on Testing Server" is selected, uploads the mmhttpdb.asp script to the web site but does not require authentication, which allows remote attackers to obtain sensitive information and possibly execute arbitrary SQL commands via a direct request to mmhttpdb.asp.
Affected Products: n/a
References: [{'name': '20040403 [securityzone@macromedia.com: New Macromedia Security Zone Bulletin Posted]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108102481929451&w=2'}, {'name': '11284', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11284'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/devnet/security/security_zone/mpsb04-05.html'}, {'name': '10036', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10036'}, {'name': 'dreamweaver-test-script-sql-injection(15721)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15721'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/dreamweaver.txt'}]
CVE State: PUBLISHED
Explain CVE-2004-1894
TEXutil in ConTEXt, when executed with the --silent option, allows local users to overwrite arbitrary files via a symlink attack on texutil.log.
Affected Products: n/a
References: [{'name': '1009661', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009661'}, {'name': '20040404 Texutil symlink vulnerability.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108118755923319&w=2'}, {'name': 'texutil-symlink-attack(15728)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15728'}, {'name': '10042', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10042'}, {'name': '20040404 Texutil symlink vulnerability.', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019777.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1895
YaST Online Update (YOU) in SuSE 8.2 and 9.0 allows local users to overwrite arbitrary files via a symlink attack on you-$USER/cookies.
Affected Products: n/a
References: [{'name': '20040405 SuSEs YaST Online Update - possible symlink attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108118395519164&w=2'}, {'name': '11300', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11300'}, {'name': 'suse-you-symlink(15731)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15731'}, {'name': '20040406 Re: SuSEs YaST Online Update - possible symlink attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2004-04/0058.html'}, {'name': '1009668', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009668'}, {'name': '4985', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4985'}, {'name': '10047', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10047'}]
CVE State: PUBLISHED
Explain CVE-2004-1896
Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file.
Affected Products: n/a
References: [{'name': '4944', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4944'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/winampheap.txt'}, {'name': '1009660', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009660'}, {'name': '10045', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10045'}, {'name': '20040405 NGSSoftware Insight Security Research Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108118289208693&w=2'}, {'name': 'winamp-inmod-bo(15727)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15727'}, {'name': '11285', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11285'}]
CVE State: PUBLISHED
Explain CVE-2004-1897
Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fault) by sending a Basic Authentication request without a password, which causes Monit to decrement a null pointer and perform an out-of-bounds read.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.tildeslash.com/monit/changes.html'}, {'name': '10051', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10051'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.tildeslash.com/monit/secadv_20040305.txt'}, {'name': '20040405 Advisory: Multiple Vulnerabilities in Monit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108119149103696&w=2'}, {'name': '11304', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11304'}, {'name': 'monit-basic-auth-dos(15734)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15734'}]
CVE State: PUBLISHED
Explain CVE-2004-1898
Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.tildeslash.com/monit/changes.html'}, {'name': '10051', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10051'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.tildeslash.com/monit/secadv_20040305.txt'}, {'name': '20040405 Advisory: Multiple Vulnerabilities in Monit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108119149103696&w=2'}, {'name': '4981', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4981'}, {'name': '11304', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11304'}, {'name': 'monit-offbyone-bo(15735)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15735'}, {'name': '20040405 [VulnWatch] Advisory: Multiple Vulnerabilities in Monit', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0076.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1899
The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POST that contains 1024 bytes.
Affected Products: n/a
References: [{'name': 'monit-post-offbyone-bo(15736)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15736'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.tildeslash.com/monit/changes.html'}, {'name': '10051', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10051'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.tildeslash.com/monit/secadv_20040305.txt'}, {'name': '20040405 Advisory: Multiple Vulnerabilities in Monit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108119149103696&w=2'}, {'name': '11304', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11304'}, {'name': '4979', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4979'}, {'name': '20040405 [VulnWatch] Advisory: Multiple Vulnerabilities in Monit', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0076.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1900
Format string vulnerability in the logging function in IGI 2 Covert Strike server 1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in RCON commands.
Affected Products: n/a
References: [{'name': '11299', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11299'}, {'name': '4966', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4966'}, {'name': '1009667', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009667'}, {'name': 'igi2covertstrike-rcon-format-string(15742)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15742'}, {'name': '10053', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10053'}, {'name': '20040405 Format string bug in IGI 2: Covert Strike 1.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108120385811815&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/igi2fs-adv.txt'}]
CVE State: PUBLISHED
Explain CVE-2004-1901
Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles.
Affected Products: n/a
References: [{'name': '10060', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10060'}, {'name': 'GLSA-200404-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200404-01.xml'}, {'name': '11305', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11305'}, {'name': 'portage-lockfile-hardlink(15754)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15754'}]
CVE State: PUBLISHED
Explain CVE-2004-1902
The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately after executing the First Time User Wizards, which allows local users to gain sensitive information.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.citrix.com/kb/entry.jspa?entryID=4062&categoryID=256'}, {'name': '4942', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4942'}, {'name': '1009659', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009659'}, {'name': '10049', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10049'}, {'name': 'metaframe-wizard-info-disclosure(15737)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15737'}, {'name': '11293', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11293'}, {'name': '20040406 Foundstone Labs Advisory: Citrix MetaFrame Password Manager 2.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108127948610311&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1903
Buffer overflow in blaxxun 3D 7.0 allows remote attackers to execute arbitrary code via a long URL property inside an object tag.
Affected Products: n/a
References: [{'name': 'blaxxun-applicationxcc3d-bo(15625)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15625'}, {'name': '20040406 blaxxun3D(blaxxun Platform) 7 - Remote Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108127833002955&w=2'}, {'name': '10064', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10064'}]
CVE State: PUBLISHED
Explain CVE-2004-1904
Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string.
Affected Products: n/a
References: [{'name': '20040406 Panda ActiveScan 5.0 - Remote Buffer Overflow and A Crash(D.O.S)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108130573130482&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://theinsider.deep-ice.com/texts/advisory53.txt'}, {'name': 'panda-activescan-ascontrol-bo(15764)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15764'}, {'name': '10065', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10065'}, {'name': '11312', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11312'}]
CVE State: PUBLISHED
Explain CVE-2004-1905
ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service (crash) by calling the SetSitesFile function.
Affected Products: n/a
References: [{'name': 'panda-activescan-ascontrol-dos(15831)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15831'}, {'name': '20040406 Panda ActiveScan 5.0 - Remote Buffer Overflow and A Crash(D.O.S)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108130573130482&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://theinsider.deep-ice.com/texts/advisory53.txt'}, {'name': '10067', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10067'}]
CVE State: PUBLISHED