Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2004-0894
LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly validate connection information, which allows local users to gain privileges via a specially-designed program.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:4368', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4368'}, {'name': 'oval:org.mitre.oval:def:2062', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2062'}, {'name': 'oval:org.mitre.oval:def:3312', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3312'}, {'name': 'win-lsass-gain-privileges(18340)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18340'}, {'name': 'oval:org.mitre.oval:def:778', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A778'}, {'name': 'MS04-044', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-044'}, {'name': 'oval:org.mitre.oval:def:3325', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3325'}, {'name': 'oval:org.mitre.oval:def:1888', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1888'}]
CVE State: PUBLISHED
Explain CVE-2004-0897
The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
Affected Products: n/a
References: [{'name': '13802', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13802'}, {'name': 'P-095', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-095.shtml'}, {'name': '12228', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12228'}, {'name': 'VU#657118', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/657118'}, {'name': 'MS05-003', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-003'}, {'name': 'oval:org.mitre.oval:def:2447', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2447'}, {'name': '1012833', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012833'}, {'name': 'oval:org.mitre.oval:def:2128', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2128'}]
CVE State: PUBLISHED
Explain CVE-2004-0899
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service (application crash) via a malformed DHCP message, aka "Logging Vulnerability."
Affected Products: n/a
References: [{'name': 'winnt-dhcp-machinename-dos(18341)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18341'}, {'name': 'oval:org.mitre.oval:def:4282', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4282'}, {'name': 'oval:org.mitre.oval:def:2280', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2280'}, {'name': 'MS04-042', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-042'}]
CVE State: PUBLISHED
Explain CVE-2004-0900
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability."
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:3577', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3577'}, {'name': 'oval:org.mitre.oval:def:4846', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4846'}, {'name': 'MS04-042', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-042'}, {'name': 'winnt-dhcp-hardwareaddress-code-execution(18342)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18342'}]
CVE State: PUBLISHED
Explain CVE-2004-0901
Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different vulnerability than CVE-2004-0571.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:4076', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4076'}, {'name': 'oval:org.mitre.oval:def:4576', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4576'}, {'name': 'P-055', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-055.shtml'}, {'name': 'oval:org.mitre.oval:def:3882', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3882'}, {'name': 'oval:org.mitre.oval:def:1241', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1241'}, {'name': 'oval:org.mitre.oval:def:539', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A539'}, {'name': 'oval:org.mitre.oval:def:1655', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1655'}, {'name': 'MS04-041', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-041'}, {'name': '20041214 Microsoft Word 6.0/95 Document Converter Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=162&type=vulnerabilities&flashstatus=true'}, {'name': 'win-converter-font-code-execution(18338)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18338'}, {'name': 'oval:org.mitre.oval:def:4749', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4749'}, {'name': 'oval:org.mitre.oval:def:3310', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3310'}]
CVE State: PUBLISHED
Explain CVE-2004-0902
Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:11201', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11201'}, {'name': 'SUSE-SA:2004:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_36_mozilla.html'}, {'name': 'FLSA:2089', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=109900315219363&w=2'}, {'name': 'mozilla-nspop3protocol-bo(17379)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17379'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=256316'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=245066'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=226669'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=258005'}, {'name': 'mozilla-netscape-nonascii-bo(17378)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17378'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3'}, {'name': 'GLSA-200409-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-26.xml'}, {'name': 'TA04-261A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-261A.html'}, {'name': 'SSRT4826', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=109698896104418&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0903
Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message.
Affected Products: n/a
References: [{'name': 'SUSE-SA:2004:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_36_mozilla.html'}, {'name': 'mozilla-netscape-nsvcardobj-bo(17380)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17380'}, {'name': 'FLSA:2089', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=109900315219363&w=2'}, {'name': 'VU#414240', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/414240'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=257314'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3'}, {'name': 'GLSA-200409-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-26.xml'}, {'name': '11174', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11174'}, {'name': 'oval:org.mitre.oval:def:10873', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10873'}, {'name': 'TA04-261A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-261A.html'}, {'name': 'SSRT4826', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=109698896104418&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0904
Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.
Affected Products: n/a
References: [{'name': 'mozilla-netscape-bmp-bo(17381)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17381'}, {'name': 'SUSE-SA:2004:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_36_mozilla.html'}, {'name': 'FLSA:2089', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=109900315219363&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=255067'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3'}, {'name': 'GLSA-200409-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-26.xml'}, {'name': '11171', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11171'}, {'name': 'TA04-261A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-261A.html'}, {'name': 'SSRT4826', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=109698896104418&w=2'}, {'name': 'oval:org.mitre.oval:def:10952', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10952'}, {'name': 'VU#847200', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/847200'}]
CVE State: PUBLISHED
Explain CVE-2004-0905
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in another domain.
Affected Products: n/a
References: [{'name': 'VU#651928', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/651928'}, {'name': 'SUSE-SA:2004:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_36_mozilla.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=250862'}, {'name': 'FLSA:2089', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=109900315219363&w=2'}, {'name': 'oval:org.mitre.oval:def:10378', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10378'}, {'name': '11177', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11177'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3'}, {'name': 'GLSA-200409-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-26.xml'}, {'name': 'mozilla-netscape-sameorigin-bypass(17374)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17374'}, {'name': 'TA04-261A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-261A.html'}, {'name': 'SSRT4826', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=109698896104418&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0906
The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary code.
Affected Products: n/a
References: [{'name': 'RHSA-2005:323', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-323.html'}, {'name': 'mozilla-insecure-file-permissions(17375)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17375'}, {'name': '11192', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11192'}, {'name': 'SUSE-SA:2004:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_36_mozilla.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=231083'}, {'name': 'oval:org.mitre.oval:def:11668', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11668'}, {'name': 'VU#653160', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/653160'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3'}, {'name': 'GLSA-200409-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-26.xml'}, {'name': '12526', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12526/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=235781'}]
CVE State: PUBLISHED
Explain CVE-2004-0907
The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8, create certain files with insecure permissions, which could allow local users to overwrite those files and execute arbitrary code.
Affected Products: n/a
References: [{'name': 'mozilla-tar-insecure-permissions(17373)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17373'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=254303'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3'}, {'name': 'GLSA-200409-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-26.xml'}]
CVE State: PUBLISHED
Explain CVE-2004-0908
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.
Affected Products: n/a
References: [{'name': '11179', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11179'}, {'name': 'VU#460528', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/460528'}, {'name': 'SUSE-SA:2004:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_36_mozilla.html'}, {'name': 'FLSA:2089', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=109900315219363&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=257523'}, {'name': 'oval:org.mitre.oval:def:9745', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9745'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3'}, {'name': 'GLSA-200409-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-26.xml'}, {'name': 'mozilla-shortcut-clipboard-access(17376)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17376'}, {'name': 'SSRT4826', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=109698896104418&w=2'}, {'name': '12526', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12526'}]
CVE State: PUBLISHED
Explain CVE-2004-0909
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users into performing unexpected actions, including installing software, via signed scripts that request enhanced abilities using the enablePrivilege parameter, then modify the meaning of certain security-relevant dialog messages.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=253942'}, {'name': 'SUSE-SA:2004:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_36_mozilla.html'}, {'name': 'VU#113192', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/113192'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3'}, {'name': 'GLSA-200409-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-26.xml'}, {'name': 'mozilla-enableprivilege-modify-dialog(17377)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17377'}, {'name': 'SSRT4826', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=109698896104418&w=2'}, {'name': '12526', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12526'}]
CVE State: PUBLISHED
Explain CVE-2004-0911
telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a denial of service (free of an invalid pointer), a different vulnerability than CVE-2001-0554.
Affected Products: n/a
References: [{'name': '20040918 Debian netkit telnetd vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/375743'}, {'name': 'DSA-556', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-556'}, {'name': 'telnetd-netkit-bo(17540)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17540'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=273694'}]
CVE State: PUBLISHED
Explain CVE-2004-0913
Unknown vulnerability in ecartis 0.x before 0.129a+1.0.0-snap20020514-1.3 and 1.x before 1.0.0+cvs.20030911-8 allows attackers in the same domain to gain administrator privileges and modify configuration.
Affected Products: n/a
References: [{'name': 'ecartis-gain-privileges(17809)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17809'}, {'name': '11487', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11487'}, {'name': 'DSA-572', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-572'}, {'name': 'ESB-2004.0669', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4491'}, {'name': '12918', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12918/'}]
CVE State: PUBLISHED
Explain CVE-2004-0915
Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hide_cvsroot and forbidden settings, which could allow remote attackers to gain sensitive information.
Affected Products: n/a
References: [{'name': 'DSA-605', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-605'}, {'name': 'viewcvs-repository-weak-security(18369)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18369'}]
CVE State: PUBLISHED
Explain CVE-2004-0916
Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containing .. (dot dot) sequences in a filename.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kyz.uklinux.net/cabextract.php#changes'}, {'name': '12882', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12882/'}, {'name': 'DSA-574', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-574'}, {'name': 'cabextract-directory-traversal(17766)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17766'}, {'name': '11460', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11460'}]
CVE State: PUBLISHED
Explain CVE-2004-0917
The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to /diag.
Affected Products: n/a
References: [{'name': 'vignette-diagnostic-obtain-info(17530)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17530'}, {'name': '11267', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11267'}, {'name': '1011447', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011447'}, {'name': 'A092804-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2004/a092804-1.txt'}]
CVE State: PUBLISHED
Explain CVE-2004-0918
The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error.
Affected Products: n/a
References: [{'name': 'CLA-2005:923', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923'}, {'name': '11385', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11385'}, {'name': 'SCOSA-2005.16', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.16/SCOSA-2005.16.txt'}, {'name': 'RHSA-2004:591', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-591.html'}, {'name': '20041011 Squid Web Proxy Cache Remote Denial of Service Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=152&type=vulnerabilities&flashstatus=false'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Advisories/SQUID-2004_3.txt'}, {'name': 'oval:org.mitre.oval:def:10931', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10931'}, {'name': 'ADV-2008-1969', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1969/references'}, {'name': '30967', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30967'}, {'name': 'FLSA-2006:152809', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/updates/FEDORA--.shtml'}, {'name': 'SUSE-SR:2008:014', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html'}, {'name': 'FEDORA-2008-6045', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00122.html'}, {'name': 'OpenPKG-SA-2004.048', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://marc.info/?l=bugtraq&m=109913064629327&w=2'}, {'name': 'squid-snmp-asnparseheader-dos(17688)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17688'}, {'name': '30914', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30914'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Advisories/SQUID-2008_1.txt'}, {'name': 'GLSA-200410-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200410-15.xml'}]
CVE State: PUBLISHED
Explain CVE-2004-0919
The syscons CONS_SCRSHOT ioctl in FreeBSD 5.x allows local users to read arbitrary kernel memory via (1) negative coordinates or (2) large coordinates.
Affected Products: n/a
References: [{'name': '12722', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12722'}, {'name': 'FreeBSD-SA-04:15', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:15.syscons.asc'}, {'name': 'VU#969078', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/969078'}, {'name': '11321', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11321'}, {'name': 'syscons-consscrshot-info-disclosure(17584)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17584'}]
CVE State: PUBLISHED
Explain CVE-2004-0920
Symantec Norton AntiVirus 2004, and earlier versions, allows a virus or other malicious code to avoid detection or cause a denial of service (application crash) using a filename containing an MS-DOS device name.
Affected Products: n/a
References: [{'name': 'nav-antivirus-security-bypass(17603)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17603'}, {'name': '20041005 Symantec Norton AntiVirus Reserved Device Name Handling Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=147&type=vulnerabilities'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.seifried.org/security/advisories/kssa-010.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0921
AFP Server on Mac OS X 10.3.x to 10.3.5, when a guest has mounted an AFP volume, allows the guest to "terminate authenticated user mounts" via modified SessionDestroy packets.
Affected Products: n/a
References: [{'name': '11322', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11322'}, {'name': 'APPLE-SA-2004-09-30', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0922
AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which causes AFP to change a write-only AFP Drop Box to be read-write when the Drop Box is on a share that is mounted by a guest, which allows attackers to read the Drop Box.
Affected Products: n/a
References: [{'name': '11322', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11322'}, {'name': 'APPLE-SA-2004-09-30', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0923
CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local users to obtain user names and passwords.
Affected Products: n/a
References: [{'name': 'cups-password-disclosure(17593)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17593'}, {'name': 'oval:org.mitre.oval:def:10710', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10710'}, {'name': 'VU#557062', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/557062'}, {'name': 'MDKSA-2004:116', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:116'}, {'name': 'APPLE-SA-2004-09-30', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html'}, {'name': 'DSA-566', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-566'}, {'name': 'RHSA-2004:543', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-543.html'}, {'name': '11324', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11324'}, {'name': 'P-002', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-002.shtml'}]
CVE State: PUBLISHED
Explain CVE-2004-0924
NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not.
Affected Products: n/a
References: [{'name': '11322', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11322'}, {'name': 'APPLE-SA-2004-09-30', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0925
Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2004-09-30', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0926
Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a certain BMP image.
Affected Products: n/a
References: [{'name': '11322', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11322'}, {'name': 'APPLE-SA-2004-10-27', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Oct/msg00001.html'}, {'name': 'APPLE-SA-2004-09-30', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0927
ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same example self-signed certificate on each system, which allows remote attackers to decrypt sessions.
Affected Products: n/a
References: [{'name': '11322', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11322'}, {'name': 'APPLE-SA-2004-09-30', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0928
The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm".
Affected Products: n/a
References: [{'name': '20040923 New Macromedia Security Zone Bulletins Posted', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109621995623823&w=2'}, {'name': '12647', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12647/'}, {'name': 'VU#977440', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/977440'}, {'name': '20041005 ColdFusion MX 6.1 on IIS File Contents Disclosure', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=148&type=vulnerabilities'}, {'name': '11245', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11245'}, {'name': 'coldfusion-jrun-restriction-bypass(17484)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17484'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html'}, {'name': '12638', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12638/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/devnet/security/security_zone/mpsb04-09.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0929
Heap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG_SUPPORT (old JPEG support) option, allows remote attackers to execute arbitrary code via a malformed TIFF image.
Affected Products: n/a
References: [{'name': '20041022 Novell SuSe Linux LibTIFF Heap Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=154&type=vulnerabilities'}, {'name': 'SUSE-SA:2004:038', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_38_libtiff.html'}, {'name': 'libtiff-ojpegvsetfield-bo(17843)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17843'}, {'name': 'VU#129910', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/129910'}]
CVE State: PUBLISHED
Explain CVE-2004-0930
The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.
Affected Products: n/a
References: [{'name': 'USN-22-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-22-1/'}, {'name': 'samba-msfnmatch-dos(17987)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17987'}, {'name': 'MDKSA-2004:131', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:131'}, {'name': 'CLA-2004:899', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000899'}, {'name': '20041108 Samba SMBD Remote Denial of Service Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=156&type=vulnerabilities&flashstatus=false'}, {'name': '101783', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101783-1'}, {'name': 'OpenPKG-SA-2004.054', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://marc.info/?l=bugtraq&m=110330519803655&w=2'}, {'name': 'APPLE-SA-2005-03-21', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html'}, {'name': 'GLSA-200411-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-21.xml'}, {'name': '11624', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11624'}, {'name': '20041201-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P'}, {'name': 'SUSE-SA:2004:040', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_40_samba.html'}, {'name': 'oval:org.mitre.oval:def:10936', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10936'}, {'name': 'SCOSA-2005.17', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt'}, {'name': '20041108 [SECURITY] CAN-2004-0930: Potential Remote Denial of Service Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109993720717957&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0931
MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service (crash) via an HTTP request to webdbm with high ASCII values in the Server field, which triggers an assert error in the IsAscii7 function.
Affected Products: n/a
References: [{'name': '10532', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10532'}, {'name': '12756', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://www.secunia.com/advisories/12756'}, {'name': '11346', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11346'}, {'name': '20041006 MySQL MaxDB Web Agent WebDBMServer Name Denial of Service Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=150&type=vulnerabilities&flashstatus=false'}, {'name': 'maxdb-isascii7dos(17633)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17633'}]
CVE State: PUBLISHED
Explain CVE-2004-0932
McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Affected Products: n/a
References: [{'name': 'antivirus-zip-protection-bypass(17761)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17761'}, {'name': '11448', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11448'}, {'name': '20041018 Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true'}]
CVE State: PUBLISHED
Explain CVE-2004-0933
Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Affected Products: n/a
References: [{'name': 'antivirus-zip-protection-bypass(17761)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17761'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://supportconnectw.ca.com/public/ca_common_docs/arclib_vuln.asp'}, {'name': '11448', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11448'}, {'name': '20041018 Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true'}]
CVE State: PUBLISHED
Explain CVE-2004-0934
Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Affected Products: n/a
References: [{'name': 'antivirus-zip-protection-bypass(17761)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17761'}, {'name': 'VU#968818', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/968818'}, {'name': '11448', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11448'}, {'name': '20041018 Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true'}]
CVE State: PUBLISHED
Explain CVE-2004-0935
Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Affected Products: n/a
References: [{'name': 'antivirus-zip-protection-bypass(17761)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17761'}, {'name': 'VU#968818', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/968818'}, {'name': '11448', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11448'}, {'name': '20041018 Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true'}]
CVE State: PUBLISHED
Explain CVE-2004-0936
RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Affected Products: n/a
References: [{'name': 'antivirus-zip-protection-bypass(17761)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17761'}, {'name': 'VU#968818', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/968818'}, {'name': '11448', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11448'}, {'name': '20041018 Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true'}]
CVE State: PUBLISHED
Explain CVE-2004-0937
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Affected Products: n/a
References: [{'name': 'antivirus-zip-protection-bypass(17761)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17761'}, {'name': 'VU#968818', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/968818'}, {'name': '11448', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11448'}, {'name': '20041018 Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true'}]
CVE State: PUBLISHED