Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2004-0677
Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service (temporary hang) via the cd command with an unusual argument, possibly due to multiple leading slashes and/or an access to the floppy drive ("A").
Affected Products: n/a
References: [{'name': '20040704 Fastream NETFile FTP/Web Server Input validation Errors', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108904874104880&w=2'}, {'name': 'fastream-cd-dos(16615)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16615'}]
CVE State: PUBLISHED
Explain CVE-2004-0678
Cross-site scripting (XSS) in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to execute arbitrary script as other users via the page parameter.
Affected Products: n/a
References: [{'name': '10659', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10659'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.autistici.org/fdonato/advisory/12PlanetChatServer2.9-adv.txt'}, {'name': '20040705 XSS in 12Planet Chat Server 2.9', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108904648728706&w=2'}, {'name': '12planet-chat-server-xss(16605)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16605'}]
CVE State: PUBLISHED
Explain CVE-2004-0679
The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses.
Affected Products: n/a
References: [{'name': '560', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/560'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.bandecon.com/advisory/unreal.txt'}, {'name': '20040705 unreal ircd ip cloaking subsystem vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108904813003166&w=2'}, {'name': '10663', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10663'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.unrealircd.com/'}, {'name': 'unreal-ircd-information-disclosure(16610)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16610'}]
CVE State: PUBLISHED
Explain CVE-2004-0680
Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access.
Affected Products: n/a
References: [{'name': '20040706 backdoor menu on conexant chipset dsl router (Zoom X3)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108915255520924&w=2'}, {'name': 'conexant-chipset-settings-restore(16639)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16639'}, {'name': '10669', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10669'}]
CVE State: PUBLISHED
Explain CVE-2004-0681
Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffice_message.asp, (3) comersus_supportError.asp, or (4) comersus_message.asp in Comersus Cart 5.09 allow remote attackers to execute web script as other users via the message parameter.
Affected Products: n/a
References: [{'name': 'comersus-cart-xss(16646)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16646'}, {'name': '10674', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10674'}, {'name': '20040707 Comersus Cart Cross-Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108922169327403&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0682
comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly modifying them in the URL.
Affected Products: n/a
References: [{'name': '10674', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10674'}, {'name': '20040707 Comersus Cart Improper Request Handling', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108922336529987&w=2'}, {'name': 'comersus-cart-price-modification(16645)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16645'}]
CVE State: PUBLISHED
Explain CVE-2004-0683
Symantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service (CPU consumption) via a compressed archive that contains a large number of directories.
Affected Products: n/a
References: [{'name': '20040709 Norton AntiVirus Denial Of Service Vulnerability [Part: !!!]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108938579712894&w=2'}, {'name': 'nav-compressed-dos(16658)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16658'}]
CVE State: PUBLISHED
Explain CVE-2004-0684
WebSphere Edge Component Caching Proxy in WebSphere Edge Server 5.02, with the JunctionRewrite directive enabled, allows remote attackers to cause a denial of service via an HTTP GET request without any parameters.
Affected Products: n/a
References: [{'name': 'ibm-edge-caching-dos(16607)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16607'}, {'name': '20040708 CYBSEC - Security Advisory: Denial of Service in IBM WebSphere', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108938997528245&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cybsec.com/vuln/IBM-WebSphere-Edge-Server-DOS.pdf'}]
CVE State: PUBLISHED
Explain CVE-2004-0685
Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.
Affected Products: n/a
References: [{'name': '20163', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20163'}, {'name': 'VU#981134', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/981134'}, {'name': 'linux-usb-gain-privileges(16931)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16931'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityspace.com/smysecure/catid.html?id=14580'}, {'name': 'DSA-1082', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1082'}, {'name': '10892', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10892'}, {'name': 'FLSA:2336', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2336'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127921'}, {'name': 'GLSA-200408-24', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml'}, {'name': 'DSA-1070', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1070'}, {'name': '20162', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20162'}, {'name': '2004-0041', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.net/errata/2004/0041/'}, {'name': 'DSA-1067', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1067'}, {'name': 'DSA-1069', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1069'}, {'name': 'RHSA-2004:505', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-505.html'}, {'name': 'oval:org.mitre.oval:def:10665', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10665'}, {'name': '20202', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20202'}, {'name': 'RHSA-2004:504', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-504.html'}, {'name': '20338', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20338'}]
CVE State: PUBLISHED
Explain CVE-2004-0686
Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.
Affected Products: n/a
References: [{'name': '2004-0039', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0039/'}, {'name': 'CLA-2004:851', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000851'}, {'name': 'RHSA-2004:259', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-259.html'}, {'name': '20040722 TSSA-2004-014 - samba', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109052891507263&w=2'}, {'name': 'CLA-2004:854', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000854'}, {'name': '20040722 [OpenPKG-SA-2004.033] OpenPKG Security Advisory (samba)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109051533021376&w=2'}, {'name': 'SUSE-SA:2004:022', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_22_samba.html'}, {'name': '20040722 Security Release - Samba 3.0.5 and 2.2.10', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109051340810458&w=2'}, {'name': 'MDKSA-2004:071', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071'}, {'name': 'FLSA:2102', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=109785827607823&w=2'}, {'name': 'samba-mangling-method-bo(16786)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16786'}, {'name': 'SSRT4782', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=109094272328981&w=2'}, {'name': 'GLSA-200407-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml'}, {'name': '57664', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1'}, {'name': '101584', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1'}, {'name': 'oval:org.mitre.oval:def:10461', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10461'}]
CVE State: PUBLISHED
Explain CVE-2004-0689
KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:9334', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9334'}, {'name': 'CLA-2004:864', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864'}, {'name': '12276', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12276/'}, {'name': 'kde-application-symlink(16963)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16963'}, {'name': 'DSA-539', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-539'}, {'name': '200408-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200408-13.xml'}, {'name': '20040811 KDE Security Advisories: Temporary File and Konqueror Frame Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109225538901170&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20040811-1.txt'}]
CVE State: PUBLISHED
Explain CVE-2004-0690
The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP files in the /tmp directory.
Affected Products: n/a
References: [{'name': 'CLA-2004:864', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864'}, {'name': 'kde-dcopserver-symlink(16962)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16962'}, {'name': '12276', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12276'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261386'}, {'name': 'MDKSA-2004:086', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:086'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20040811-2.txt'}, {'name': 'VU#330638', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/330638'}, {'name': '10924', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10924'}, {'name': '200408-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200408-13.xml'}, {'name': '20040811 KDE Security Advisories: Temporary File and Konqueror Frame Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109225538901170&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0691
Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:9485', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9485'}, {'name': 'GLSA-200408-20', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200408-20.xml'}, {'name': 'SUSE-SA:2004:027', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_27_qt3.html'}, {'name': 'RHSA-2004:414', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-414.html'}, {'name': 'DSA-542', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-542'}, {'name': 'qt-bmp-bo(17040)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17040'}, {'name': '201610', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1'}, {'name': '20040818 CESA-2004-004: qt', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109295309008309&w=2'}, {'name': 'MDKSA-2004:085', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:085'}]
CVE State: PUBLISHED
Explain CVE-2004-0692
The XPM parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0693.
Affected Products: n/a
References: [{'name': 'GLSA-200408-20', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200408-20.xml'}, {'name': 'SUSE-SA:2004:027', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_27_qt3.html'}, {'name': 'RHSA-2004:414', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-414.html'}, {'name': 'qt-xpm-dos(17041)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17041'}, {'name': 'DSA-542', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-542'}, {'name': 'FLSA:2314', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=110979666528890&w=2'}, {'name': '201610', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1'}, {'name': 'oval:org.mitre.oval:def:10327', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10327'}, {'name': 'MDKSA-2004:085', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:085'}]
CVE State: PUBLISHED
Explain CVE-2004-0693
The GIF parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0692.
Affected Products: n/a
References: [{'name': 'GLSA-200408-20', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200408-20.xml'}, {'name': 'SUSE-SA:2004:027', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_27_qt3.html'}, {'name': 'RHSA-2004:414', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-414.html'}, {'name': 'qt-gif-dos(17042)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17042'}, {'name': 'DSA-542', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-542'}, {'name': '201610', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1'}, {'name': 'oval:org.mitre.oval:def:10883', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10883'}, {'name': 'MDKSA-2004:085', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:085'}]
CVE State: PUBLISHED
Explain CVE-2004-0694
Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771.  NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.
Affected Products: n/a
References: [{'name': 'RHSA-2004:323', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-323.html'}, {'name': 'oval:org.mitre.oval:def:9981', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9981'}, {'name': 'RHSA-2004:440', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-440.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0695
Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long FTP command.
Affected Products: n/a
References: [{'name': 'A071304-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2004/a071304-1.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt'}, {'name': '4dwebstar-long-ftp-bo(16686)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16686'}]
CVE State: PUBLISHED
Explain CVE-2004-0696
The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a "*" (asterisk) character.
Affected Products: n/a
References: [{'name': 'A071304-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2004/a071304-1.txt'}, {'name': '4dwebstar-view-directory-listing(16687)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16687'}, {'tags': ['x_refsource_MISC'], 'url': 'ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt'}, {'name': '10721', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10721'}]
CVE State: PUBLISHED
Explain CVE-2004-0697
Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and possibly obtain sensitive information.
Affected Products: n/a
References: [{'name': 'A071304-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2004/a071304-1.txt'}, {'name': '4dwebstar-view-phpini-files(16688)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16688'}, {'tags': ['x_refsource_MISC'], 'url': 'ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt'}]
CVE State: PUBLISHED
Explain CVE-2004-0698
4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'name': 'A071304-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2004/a071304-1.txt'}, {'name': '4dwebstar-symlink(16689)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16689'}, {'tags': ['x_refsource_MISC'], 'url': 'ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt'}]
CVE State: PUBLISHED
Explain CVE-2004-0699
Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.checkpoint.com/techsupport/alerts/asn1.html'}, {'name': '1010799', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/alerts/2004/Jul/1010799.html'}, {'name': 'VU#435358', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/435358'}, {'name': '8290', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/displayvuln.php?osvdb_id=8290'}, {'name': '10820', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10820'}, {'name': '12177', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12177/'}, {'name': '20040728 Check Point VPN-1 ASN.1 Decoding Remote Compromise', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/xforce/alerts/id/178'}, {'name': 'O-190', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-190.shtml'}, {'name': 'vpn1-asn1-decoding-bo(16824)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16824'}]
CVE State: PUBLISHED
Explain CVE-2004-0700
Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://virulent.siyahsapka.org/'}, {'name': '7929', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7929'}, {'name': 'USN-177-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-177-1'}, {'name': '10736', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10736'}, {'name': 'RHSA-2004:405', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-405.html'}, {'name': 'apache-modssl-format-string(16705)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16705'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/0407-advisories/modsslFormat.txt'}, {'name': 'CLA-2004:857', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857'}, {'name': 'MDKSA-2004:075', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075'}, {'name': 'DSA-532', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-532'}, {'name': 'RHSA-2004:408', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-408.html'}, {'name': 'FLSA:1888', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=1888'}, {'name': '[apache-modssl] 20040716  [ANNOUNCE] mod_ssl 2.8.19 for Apache 1.3.31', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=apache-modssl&m=109001100906749&w=2'}, {'name': 'VU#303448', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/303448'}, {'name': '20040716 [OpenPKG-SA-2004.032] OpenPKG Security Advisory (apache)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109005001205991&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0701
Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access.
Affected Products: n/a
References: [{'name': '7457', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7457'}, {'name': 'sun-ray-session-access(11905)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11905'}, {'name': 'VU#100780', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/100780'}, {'name': '53922', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F53922'}]
CVE State: PUBLISHED
Explain CVE-2004-0702
DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not running, which could allow remote attackers to gain sensitive information.
Affected Products: n/a
References: [{'name': 'bugzilla-database-password-disclosure(16673)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16673'}, {'name': '10698', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10698'}, {'name': '20040710 [BUGZILLA] Multiple vulnerabilities in Bugzilla 2.16.5 and 2.17.7', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108965446813639&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0703
Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant membership" privileges to grant memberships to groups that the user does not control.
Affected Products: n/a
References: [{'name': 'bugzilla-editusers-gain-privileges(16672)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16672'}, {'name': '10698', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10698'}, {'name': '20040710 [BUGZILLA] Multiple vulnerabilities in Bugzilla 2.16.5 and 2.17.7', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108965446813639&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0704
Unknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, when configured to hide products, allows remote attackers to view hidden products.
Affected Products: n/a
References: [{'name': '10698', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10698'}, {'name': '20040710 [BUGZILLA] Multiple vulnerabilities in Bugzilla 2.16.5 and 2.17.7', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108965446813639&w=2'}, {'name': 'bugzilla-product-name-disclosure(16671)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16671'}]
CVE State: PUBLISHED
Explain CVE-2004-0705
Multiple cross-site scripting (XSS) vulnerabilities in (1) editcomponents.cgi, (2) editgroups.cgi, (3) editmilestones.cgi, (4) editproducts.cgi, (5) editusers.cgi, and (6) editversions.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allow remote attackers to execute arbitrary JavaScript as other users via a URL parameter.
Affected Products: n/a
References: [{'name': 'bugzilla-edit-xss(16670)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16670'}, {'name': '10698', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10698'}, {'name': '20040710 [BUGZILLA] Multiple vulnerabilities in Bugzilla 2.16.5 and 2.17.7', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108965446813639&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=235265'}]
CVE State: PUBLISHED
Explain CVE-2004-0706
Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password in the web server log files.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=235510'}, {'name': '10698', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10698'}, {'name': '20040710 [BUGZILLA] Multiple vulnerabilities in Bugzilla 2.16.5 and 2.17.7', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108965446813639&w=2'}, {'name': 'bugzilla-chart-view-password(16669)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16669'}]
CVE State: PUBLISHED
Explain CVE-2004-0707
SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=244272'}, {'name': '10698', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10698'}, {'name': '20040710 [BUGZILLA] Multiple vulnerabilities in Bugzilla 2.16.5 and 2.17.7', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108965446813639&w=2'}, {'name': 'bugzilla-editusers-sql-injection(16668)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16668'}]
CVE State: PUBLISHED
Explain CVE-2004-0708
MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges.
Affected Products: n/a
References: [{'name': 'GLSA-200407-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200407-09.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/tracker/index.php?func=detail&aid=948103&group_id=8482&atid=108482'}, {'name': 'moinmoin-gain-admin-access(16465)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16465'}, {'name': '11807', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11807'}, {'name': '10568', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10568'}, {'name': '6704', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6704'}]
CVE State: PUBLISHED
Explain CVE-2004-0709
HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode characters in a URL, which could allow remote attackers to bypass access restrictions.
Affected Products: n/a
References: [{'name': 'VU#205766', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/205766'}, {'name': '10414', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10414'}, {'name': 'SSRT4719', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/6774'}, {'name': 'openview-select-gain-access(16247)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16247'}]
CVE State: PUBLISHED
Explain CVE-2004-0710
IP Security VPN Services Module (VPNSM) in Cisco Catalyst 6500 Series Switch and the Cisco 7600 Series Internet Routers running IOS before 12.2(17b)SXA, before 12.2(17d)SXB, or before 12.2(14)SY03 could allow remote attackers to cause a denial of service (device crash and reload) via a malformed Internet Key Exchange (IKE) packet.
Affected Products: n/a
References: [{'name': 'VU#904310', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/904310'}, {'name': '20040408 Cisco IPSec VPN Services Module Malformed IKE Packet Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040408-vpnsm.shtml'}, {'name': 'oval:org.mitre.oval:def:5696', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5696'}, {'name': 'cisco-vpnsm-ike-dos(15797)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15797'}, {'name': '10083', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10083'}]
CVE State: PUBLISHED
Explain CVE-2004-0711
The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*" as wildcards as if they were the legal "/*" pattern, which could cause WebLogic 7.x to allow remote attackers to bypass intended access restrictions because the illegal patterns are properly rejected.
Affected Products: n/a
References: [{'name': '10184', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10184'}, {'name': 'VU#184558', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/184558'}, {'name': 'weblogic-urlpattern-obtain-information(15927)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15927'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_56.00.jsp'}]
CVE State: PUBLISHED
Explain CVE-2004-0712
The configuration tools (1) config.sh in Unix or (2) config.cmd in Windows for BEA WebLogic Server 8.1 through SP2 create a log file that contains the administrative username and password in cleartext, which could allow local users to gain privileges.
Affected Products: n/a
References: [{'name': 'VU#574222', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/574222'}, {'name': '10188', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10188'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_58.00.jsp'}, {'name': 'weblogic-admin-password-plaintext(15926)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15926'}]
CVE State: PUBLISHED
Explain CVE-2004-0713
The remove method in a stateful Enterprise JavaBean (EJB) in BEA WebLogic Server and WebLogic Express version 8.1 through SP2, 7.0 through SP4, and 6.1 through SP6, does not properly check EJB permissions before unexporting a bean, which allows remote authenticated users to remove EJB objects from remote views before the security exception is thrown.
Affected Products: n/a
References: [{'name': 'weblogic-ejb-object-deletion(15928)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15928'}, {'name': '10185', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10185'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_57.00.jsp'}, {'name': 'VU#658878', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/658878'}]
CVE State: PUBLISHED
Explain CVE-2004-0714
Cisco Internetwork Operating System (IOS) 12.0S through 12.3T attempts to process SNMP solicited operations on improper ports (UDP 162 and a randomly chosen UDP port), which allows remote attackers to cause a denial of service (device reload and memory corruption).
Affected Products: n/a
References: [{'name': 'cisco-ios-snmp-udp-dos(15921)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15921'}, {'name': 'VU#162451', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/162451'}, {'name': 'TA04-111B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-111B.html'}, {'name': '20040420 Vulnerabilities in SNMP Message Processing', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040420-snmp.shtml'}, {'name': '10186', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10186'}, {'name': 'oval:org.mitre.oval:def:5845', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5845'}]
CVE State: PUBLISHED
Explain CVE-2004-0715
The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 does not properly clear member relationships when a group is deleted, which can cause a new group with the same name to have the members of the old group, which allows group members to gain privileges.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_52.01.jsp'}, {'name': '5299', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5299'}, {'name': 'VU#470470', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/470470'}, {'name': '1009763', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009763'}, {'name': '10130', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10130'}, {'name': '11356', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11356'}, {'name': 'weblogic-authentication-gain-privileges(15861)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15861'}]
CVE State: PUBLISHED
Explain CVE-2004-0716
Buffer overflow in the DCE daemon (DCED) for the DCE endpoint mapper (epmap) on HP-UX 11 allows remote attackers to execute arbitrary code via a request with a small fragment length and a large amount of data.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.entegrity.com/private/patches/dce/ssrt4741.asp'}, {'name': 'VU#259796', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/259796'}, {'name': 'A072204-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2004/a072204-1.txt'}]
CVE State: PUBLISHED
Explain CVE-2004-0717
Opera 7.51 for Windows and 7.50 for Linux does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
Affected Products: n/a
References: [{'name': 'http-frame-spoof(1598)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1598'}, {'name': '11978', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11978'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/'}]
CVE State: PUBLISHED
Explain CVE-2004-0718
The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
Affected Products: n/a
References: [{'name': 'DSA-810', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-810'}, {'name': 'DSA-777', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-777'}, {'name': 'http-frame-spoof(1598)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1598'}, {'name': 'SCOSA-2005.49', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt'}, {'name': 'SUSE-SA:2004:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_36_mozilla.html'}, {'name': 'RHSA-2004:421', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-421.html'}, {'name': 'MDKSA-2004:082', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:082'}, {'name': 'FLSA:2089', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=109900315219363&w=2'}, {'name': '15495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/15495'}, {'name': '11978', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11978'}, {'name': 'oval:org.mitre.oval:def:4756', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4756'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=246448'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/'}, {'name': 'oval:org.mitre.oval:def:9997', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9997'}]
CVE State: PUBLISHED
Explain CVE-2004-0719
Internet Explorer for Mac 5.2.3, Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
Affected Products: n/a
References: [{'name': 'http-frame-spoof(1598)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1598'}, {'name': '11978', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11978'}, {'name': '11966', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11966'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/'}]
CVE State: PUBLISHED
Explain CVE-2004-0720
Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
Affected Products: n/a
References: [{'name': 'http-frame-spoof(1598)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1598'}, {'name': '11978', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11978'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/'}]
CVE State: PUBLISHED
Explain CVE-2004-0721
Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
Affected Products: n/a
References: [{'name': 'http-frame-spoof(1598)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1598'}, {'name': 'CLA-2004:864', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864'}, {'name': '11978', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11978'}, {'name': 'oval:org.mitre.oval:def:11371', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11371'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20040811-3.txt'}, {'name': '200408-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200408-13.xml'}, {'name': '20040811 KDE Security Advisories: Temporary File and Konqueror Frame Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109225538901170&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/'}]
CVE State: PUBLISHED