Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2004-1322
Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages.
Affected Products: n/a
References: [{'name': '20041215 Cisco Unity Integrated with Exchange Has Default Passwords', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20041215-unity.shtml'}, {'name': 'P-060', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-060.shtml'}, {'name': '11954', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11954'}, {'name': 'cisco-unity-exchange-default-accounts(18489)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18489'}]
CVE State: PUBLISHED
Explain CVE-2004-1323
Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service (kernel crash) via a large signal number to (1) xxx_sys_kill, (2) xxx_sys_sigaction, and possibly other translation functions.
Affected Products: n/a
References: [{'name': 'NetBSD-SA2004-010', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-010.txt.asc'}, {'name': '13501', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13501/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://gleg.net/advisory_netbsd2.shtml'}, {'name': 'netbsd-compat-gain-privileges(18564)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18564'}]
CVE State: PUBLISHED
Explain CVE-2004-1324
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.
Affected Products: n/a
References: [{'name': '20041218 MS Windows Media Player 9 Vulns (2)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110352518211306&w=2'}, {'name': 'mediaplayer-mp3-code-execution(18576)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18576'}, {'name': '12031', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12031'}]
CVE State: PUBLISHED
Explain CVE-2004-1325
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system.
Affected Products: n/a
References: [{'name': '20041218 MS Windows Media Player 9 Vulns (2)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110352518211306&w=2'}, {'name': '12032', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12032'}, {'name': 'mediaplayer-activex-information-disclosure(18587)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18587'}]
CVE State: PUBLISHED
Explain CVE-2004-1326
Buffer overflow in dxterm in Ultrix 4.5 allows local users to execute arbitrary code via a long -setup parameter.
Affected Products: n/a
References: [{'name': '12049', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12049'}, {'name': '20041219 Exploit for Ultrix 4.5 dxterm', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110356470029424&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.frsirt.com/exploits/20041220.ultrix_dxterm_4.5_exploit.c.php'}, {'name': 'ultrix-dxterm-bo(18613)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18613'}]
CVE State: PUBLISHED
Explain CVE-2004-1327
Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension.
Affected Products: n/a
References: [{'name': '12038', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12038'}, {'name': '20041220 Crystal FTP Pro Client Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110356203624337&w=2'}, {'name': 'crystal-ftp-list-bo(18594)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18594'}, {'name': '13583', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13583/'}]
CVE State: PUBLISHED
Explain CVE-2004-1328
Unknown vulnerability in newgrp in HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain elevated privileges.
Affected Products: n/a
References: [{'name': '12029', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12029'}, {'name': 'SSRT4687', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=110355911415320&w=2'}, {'name': 'oval:org.mitre.oval:def:5622', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5622'}, {'name': 'hp-newgrp-gain-privileges(18577)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18577'}, {'name': '13565', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13565/'}]
CVE State: PUBLISHED
Explain CVE-2004-1329
Untrusted execution path vulnerability in the diag commands (1) lsmcode, (2) diag_exec, (3) invscout, and (4) invscoutd in AIX 5.1 through 5.3 allows local users to execute arbitrary programs by modifying the DIAGNOSTICS environment variable to point to a malicious Dctrl program.
Affected Products: n/a
References: [{'name': '701', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/701'}, {'name': 'IY64389', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY64389&apar=only'}, {'name': '20041220 AIX 5.1/5.2/5.3 local root exploits', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110355931920123&w=2'}, {'name': '20070330 AIX 4.3 lsmcode local root command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/464276/100/0/threaded'}, {'name': 'IY64277', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY64277&apar=only'}, {'name': '12041', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12041'}, {'name': 'aix-diagnostics-gain-privileges(18620)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18620'}, {'name': '20070402 Re: AIX 4.3 lsmcode local root command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/464481/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2004-1330
Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.frsirt.com/exploits/20041220.paginit.c.php'}, {'name': '20041220 AIX 5.1/5.2/5.3 local root exploits', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110355931920123&w=2'}, {'name': 'IY64522', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY64522&apar=only'}, {'name': '12043', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12043'}, {'name': 'IY64358', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY64358&apar=only'}, {'name': 'aix-paginit-username-bo(18618)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18618'}, {'name': 'IY64312', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY64312&apar=only'}]
CVE State: PUBLISHED
Explain CVE-2004-1331
The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Security Warning" dialog and save arbitrary files with arbitrary extensions via the SaveAs command.
Affected Products: n/a
References: [{'name': '3220', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3220'}, {'name': 'ie-execommand-warning-bypass(18181)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18181'}, {'name': '11686', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11686'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.frsirt.com/exploits/20041119.IESP2Unpatched.php'}, {'name': '13203', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13203/'}, {'name': '20041119 Microsoft Internet Explorer 6 SP2 Vulnerabilities / Full disclosure Vs. Security by Obscurity...', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2004-11/0260.html'}, {'name': 'VU#743974', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/743974'}]
CVE State: PUBLISHED
Explain CVE-2004-1332
Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v (debug) option enabled, allows remote attackers to execute arbitrary code via a long command request.
Affected Products: n/a
References: [{'name': 'HPSBUX01118', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=110797179710695&w=2'}, {'name': '1012650', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012650'}, {'name': 'oval:org.mitre.oval:def:5701', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5701'}, {'name': '12077', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12077'}, {'name': 'SSRT4883', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=110797179710695&w=2'}, {'name': 'VU#647438', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/647438'}, {'name': '13608', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13608'}, {'name': 'hp-ftpd-bo(18636)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18636'}, {'name': '20041221 Hewlett Packard HP-UX ftpd Remote Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=175&type=vulnerabilities&flashstatus=false'}]
CVE State: PUBLISHED
Explain CVE-2004-1333
Integer overflow in the vc_resize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows local users to cause a denial of service (kernel crash) via a short new screen value, which leads to a buffer overflow.
Affected Products: n/a
References: [{'name': '20163', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20163'}, {'name': '20041215 fun with linux kernel', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.html'}, {'name': 'USN-47-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/47-1/'}, {'name': 'linux-vcresize-dos(18523)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18523'}, {'name': 'DSA-1082', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1082'}, {'name': 'SUSE-SA:2005:018', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_18_kernel.html'}, {'name': 'DSA-1070', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1070'}, {'name': '20162', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20162'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guninski.com/where_do_you_want_billg_to_go_today_2.html'}, {'name': '11956', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11956'}, {'name': 'MDKSA-2005:218', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:218'}, {'name': 'DSA-1067', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1067'}, {'name': 'DSA-1069', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1069'}, {'name': '17826', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17826'}, {'name': 'FLSA:152532', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532'}, {'name': 'MDKSA-2005:219', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:219'}, {'name': '20202', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20202'}, {'name': '20338', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20338'}]
CVE State: PUBLISHED
Explain CVE-2004-1334
Integer overflow in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (kernel crash) via a cmsg_len that contains a -1, which leads to a buffer overflow.
Affected Products: n/a
References: [{'name': '20041215 fun with linux kernel', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.html'}, {'name': '20041215 [USN-47-1] Linux kernel vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110383108211524&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guninski.com/where_do_you_want_billg_to_go_today_2.html'}, {'name': '11956', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11956'}, {'name': 'linux-ipoptionsget-dos(18522)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18522'}]
CVE State: PUBLISHED
Explain CVE-2004-1335
Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (memory consumption) by repeatedly calling the ip_cmsg_send function.
Affected Products: n/a
References: [{'name': '20163', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20163'}, {'name': '20041215 fun with linux kernel', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.html'}, {'name': '20041215 [USN-47-1] Linux kernel vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110383108211524&w=2'}, {'name': 'DSA-1082', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1082'}, {'name': 'oval:org.mitre.oval:def:11085', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11085'}, {'name': 'RHSA-2005:017', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-017.html'}, {'name': 'DSA-1070', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1070'}, {'name': 'RHSA-2005:016', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-016.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guninski.com/where_do_you_want_billg_to_go_today_2.html'}, {'name': '11956', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11956'}, {'name': 'DSA-1067', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1067'}, {'name': 'DSA-1069', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1069'}, {'name': 'linux-ipoptionsget-memory-leak(18524)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18524'}, {'name': '20202', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20202'}, {'name': '20338', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20338'}]
CVE State: PUBLISHED
Explain CVE-2004-1336
The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'name': '12100', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12100'}, {'name': 'xdvizilla-symlink(18708)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18708'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286370'}, {'name': '20041223 [USN-51-1] teTeX auxiliary script vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110383942014839&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1337
The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'linux-security-module-gain-privileges(18673)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18673'}, {'name': '20041223 Linux 2.6  Kernel Capability LSM Module Local Privilege Elevation', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110384535113035&w=2'}, {'name': 'CLA-2005:930', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930'}, {'name': '12093', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12093'}]
CVE State: PUBLISHED
Explain CVE-2004-1338
The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to add arbitrary functions to the SDO_CMT_DBK_FN_TABLE and SDO_CMT_CBK_DML_TABLE, then performing a DELETE on the SDO_TXN_IDX_INSERTS table, which causes the SDO_CMT_CBK_TRIG trigger to execute the user-supplied functions.
Affected Products: n/a
References: [{'name': '20041223 Oracle Trigger Abuse (#NISR2122004I)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110382230614420&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/oracle23122004I.txt'}, {'name': 'oracle-triggers-gain-privileges(18655)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18655'}]
CVE State: PUBLISHED
Explain CVE-2004-1339
SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the new.table_name or new.column_name parameters.
Affected Products: n/a
References: [{'name': '20041223 Oracle Trigger Abuse (#NISR2122004I)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110382230614420&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/oracle23122004I.txt'}, {'name': 'oracle-triggers-gain-privileges(18655)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18655'}]
CVE State: PUBLISHED
Explain CVE-2004-1340
Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pam_radius_auth.conf set to be world-readable, which allows local users to obtain sensitive information.
Affected Products: n/a
References: [{'name': '1013030', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013030'}, {'name': 'libpamradiusauth-insecure-permission(19087)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19087'}, {'name': '14046', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14046'}, {'name': 'DSA-659', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-659'}]
CVE State: PUBLISHED
Explain CVE-2004-1341
Cross-site scripting (XSS) vulnerability in info2www before 1.2.2.9 allows remote attackers to inject arbitrary web script or HTML via the arguments to info2www.
Affected Products: n/a
References: [{'name': 'DSA-711', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-711'}, {'name': 'info2www-url-xss(20179)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20179'}]
CVE State: PUBLISHED
Explain CVE-2004-1342
CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method.
Affected Products: n/a
References: [{'name': 'DSA-715', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-715'}]
CVE State: PUBLISHED
Explain CVE-2004-1343
CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service (server crash).
Affected Products: n/a
References: [{'name': 'DSA-715', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-715'}]
CVE State: PUBLISHED
Explain CVE-2004-1345
Unknown vulnerability in Sun StorEdge Enterprise Storage Manager (ESM) 2.1 for Solaris 8 and Solaris 9 allows local users with the "ESMUser" role to gain root access.
Affected Products: n/a
References: [{'name': '10580', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10580'}, {'name': '11935', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11935/'}, {'name': 'VU#976470', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/976470'}, {'name': 'oval:org.mitre.oval:def:1707', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1707'}, {'name': '57581', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57581-1&searchclause=security'}, {'name': 'esm-esmuser-gain-privileges(16463)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16463'}, {'name': 'O-166', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-166.shtml'}]
CVE State: PUBLISHED
Explain CVE-2004-1346
The Sun Solaris Volume Manager (SVM) on Solaris 9 allows local users to cause a denial of service (kernel panic) via a malformed probe request to the SVM.
Affected Products: n/a
References: [{'name': 'VU#390742', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/390742'}, {'name': '12104', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12104/'}, {'name': 'solaris-svm-dos(16729)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16729'}, {'name': 'ESB-2004.0463', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4253'}, {'name': '10747', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10747'}, {'name': '57598', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57598-1&searchclause=security'}, {'name': 'oval:org.mitre.oval:def:3465', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3465'}]
CVE State: PUBLISHED
Explain CVE-2004-1347
X Display Manager (XDM) on Solaris 8 allows remote attackers to cause a denial of service (XDM crash) via an invalid X Display Manager Control Protocol (XDMCP) request.
Affected Products: n/a
References: [{'name': '101549', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101549-1'}, {'name': 'VU#139504', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/139504'}, {'name': '57619', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57619-1&searchclause=security'}, {'name': '12257', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12257/'}, {'name': '10911', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10911'}, {'name': 'xdm-xdmcp-dos(16940)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16940'}, {'name': 'oval:org.mitre.oval:def:100113', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100113'}]
CVE State: PUBLISHED
Explain CVE-2004-1348
Unknown vulnerability in in.named on Solaris 8 allows remote attackers to cause a denial of service (process crash).
Affected Products: n/a
References: [{'name': '57614', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57614-1'}, {'name': 'solaris-innamed-dynamic-dos(17269)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17269'}, {'name': '12470', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12470/'}, {'name': '11118', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11118'}, {'name': 'oval:org.mitre.oval:def:3960', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3960'}, {'name': 'ESB-2004.0565', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4369'}]
CVE State: PUBLISHED
Explain CVE-2004-1349
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
Affected Products: n/a
References: [{'name': 'solaris-gzip-modify-privileges(17577)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17577'}, {'name': '57600', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57600-1&searchclause=security'}, {'name': 'VU#635998', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/635998'}, {'name': 'oval:org.mitre.oval:def:1654', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1654'}, {'name': '11318', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11318'}, {'name': '12744', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12744'}]
CVE State: PUBLISHED
Explain CVE-2004-1350
Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests.
Affected Products: n/a
References: [{'name': '11566', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11566'}, {'name': '1012005', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012005'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.pentest.co.uk/documents/ptl-2004-06.html'}, {'name': '57606', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security'}, {'name': 'VU#964401', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/964401'}, {'name': 'P-027', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-027.shtml'}, {'name': 'ESB-2004.0691', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4516'}, {'name': '11304', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/displayvuln.php?osvdb_id=11304'}, {'name': '13036', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13036/'}, {'name': 'sun-web-proxy-bo(17920)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17920'}]
CVE State: PUBLISHED
Explain CVE-2004-1351
Unknown vulnerability in the rwho daemon (in.rwhod) for Solaris 7 through 9 allows remote attackers to execute arbitrary code.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:592', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A592'}, {'name': '11840', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11840'}, {'name': 'solaris-inrwhod-command-execution(18385)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18385'}, {'name': '57659', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57659-1&searchclause=%22category:security%22%20%22availability%2C%20security%22'}, {'name': 'P-050', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-050.shtml'}, {'name': 'ESB-2004.0759', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4597'}]
CVE State: PUBLISHED
Explain CVE-2004-1352
Buffer overflow in the ping daemon of Sun Solaris 7 through 9 may allow local users to execute arbitrary code.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:3400', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3400'}, {'name': '12168', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/displayvuln.php?osvdb_id=12168'}, {'name': '11782', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11782'}, {'name': 'ESB-2004.0749', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4586'}, {'name': 'solaris-ping-bo(18310)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18310'}, {'name': '13340', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13340'}, {'name': '1012368', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012368'}, {'name': 'P-045', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-045.shtml'}, {'name': '57675', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57675-1&searchclause=%22category:security%22%20%22availability%2C%20security%22'}]
CVE State: PUBLISHED
Explain CVE-2004-1353
Unknown vulnerability in LDAP on Sun Solaris 8 and 9, when using Role Based Access Control (RBAC), allows local users to execute certain commands with additional privileges.
Affected Products: n/a
References: [{'name': 'solaris-ldap-rbac-gain-priv(17757)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17757'}, {'name': 'oval:org.mitre.oval:def:4834', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4834'}, {'name': '10939', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/displayvuln.php?osvdb_id=10939'}, {'name': '1011789', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011789'}, {'name': '11459', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11459'}, {'name': 'P-017', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-017.shtml'}, {'name': '12873', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12873/'}, {'name': 'ESB-2004.0661', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4482'}, {'name': '57657', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57657-1&searchclause=%22category:security%22%20%22availability%2C%20security%22'}]
CVE State: PUBLISHED
Explain CVE-2004-1354
The Solaris Management Console (SMC) in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive information in conjunction with a directory traversal (..) attack.
Affected Products: n/a
References: [{'name': '57559', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57559-1&searchclause=%22category:security%22%20%20111313-02'}, {'name': 'oval:org.mitre.oval:def:1482', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1482'}, {'tags': ['x_refsource_MISC'], 'url': 'http://spoofed.org/files/text/solaris-smc-advisory.txt'}, {'name': '8873', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8873'}, {'name': '11616', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11616/'}, {'name': '[focus-sun] 20031022 Information disclosure with SMC webserver on Solaris 9', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.derkeiler.com/Mailing-Lists/securityfocus/focus-sun/2003-10/0032.html'}, {'name': 'ESB-2004.0347', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4105'}, {'name': '6119', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/displayvuln.php?osvdb_id=6119'}, {'name': 'smc-dotdot-directory-traversal(16146)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16146'}, {'name': '10349', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10349'}]
CVE State: PUBLISHED
Explain CVE-2004-1355
Unknown vulnerability in the TCP/IP stack for Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors.
Affected Products: n/a
References: [{'name': 'solaris-tcp-ip-dos(15955)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15955'}, {'name': '57545', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57545-1&searchclause=%22category:security%22%20%20111313-02'}, {'name': '11483', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11483/'}, {'name': '5665', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/displayvuln.php?osvdb_id=5665'}, {'name': 'oval:org.mitre.oval:def:2972', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2972'}, {'name': 'ESB-2004.0308', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4057'}, {'name': '10216', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10216'}]
CVE State: PUBLISHED
Explain CVE-2004-1356
Unknown vulnerability in the sendfilev function in Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors.
Affected Products: n/a
References: [{'name': '57470', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57470-1&searchclause=%22category:security%22%20%20108528-27'}, {'name': 'oval:org.mitre.oval:def:1684', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1684'}, {'name': '5619', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/displayvuln.php?osvdb_id=5619'}, {'name': '11457', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11457/'}, {'name': '10202', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10202'}, {'name': 'solaris-sendfilev-dos(15946)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15946'}, {'name': 'ESB-2004.0307', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4056'}]
CVE State: PUBLISHED
Explain CVE-2004-1357
The Secure Shell (SSH) Daemon (SSHD) in Sun Solaris 9 does not properly log IP addresses when SSHD is configured with the ListenAddress as 0.0.0.0, which makes it easier for remote attackers to hide the source of their activities.
Affected Products: n/a
References: [{'name': '57538', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57538-1'}, {'name': 'solaris-sshd-log-bypass(15784)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15784'}, {'name': 'VU#737548', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/737548'}, {'name': 'oval:org.mitre.oval:def:3505', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3505'}, {'name': '10080', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10080'}, {'name': '11316', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11316/'}, {'name': 'ESB-2004.0263', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4003'}]
CVE State: PUBLISHED
Explain CVE-2004-1358
The patches (1) 114332-08 and (2) 114929-06 for Sun Solaris 9 disable the auditing functionality of the Basic Security Module (BSM), which allows attackers to avoid having their activity logged.
Affected Products: n/a
References: [{'name': 'ESB-2004.0069', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=3788'}, {'name': 'solaris-patches-disable-bsm(14918)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14918'}, {'name': 'oval:org.mitre.oval:def:3567', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3567'}, {'name': '9852', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9852'}, {'name': 'O-099', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-099.shtml'}, {'name': '57478', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57478-1&searchclause=%22category:security%22%20%20114332-08'}]
CVE State: PUBLISHED
Explain CVE-2004-1359
Multiple buffer overflows in uucp for Sun Solaris 2.6, 7, 8, and 9 allow local users to execute arbitrary code as the uucp user.
Affected Products: n/a
References: [{'name': 'ESB-2004.0201', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=3935'}, {'name': '9837', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9837'}, {'name': 'oval:org.mitre.oval:def:1127', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1127'}, {'name': 'solaris-uucp-multiple-bo(15425)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15425'}, {'name': '57508', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57508-1'}]
CVE State: PUBLISHED
Explain CVE-2004-1360
Unknown vulnerability in conv_fix in Sun Solaris 7 through 9, when invoked by conv_lpd, allows local users to overwrite arbitrary files.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:1732', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1732'}, {'name': '4071', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/displayvuln.php?osvdb_id=4071'}, {'name': 'VU#412566', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/412566'}, {'name': '10991', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10991'}, {'name': 'O-089', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-089.shtml'}, {'name': '9759', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9759'}, {'name': 'solaris-covfix-gain-privileges(15331)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15331'}, {'name': '57509', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57509-1'}, {'name': 'ESB-2004.0169', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=3902'}]
CVE State: PUBLISHED
Explain CVE-2004-1361
Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a malformed .hlp file, which leads to a heap-based buffer overflow.
Affected Products: n/a
References: [{'name': '12091', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12091'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.xfocus.net/flashsky/icoExp/'}, {'name': '20041223 Microsoft Windows winhlp32.exe Heap Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110383690219440&w=2'}, {'name': 'win-winhlp32-bo(18678)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18678'}]
CVE State: PUBLISHED
Explain CVE-2004-1362
The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded sequences that are improperly converted to "Y" characters.
Affected Products: n/a
References: [{'name': 'oracle-character-conversion-gain-privileges(18657)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18657'}, {'name': 'VU#435974', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/435974'}, {'name': 'TA04-245A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-245A.html'}, {'name': '10871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10871'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/oracle23122004G.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf'}, {'name': '20041223 Oracle Character Conversion Bugs (#NISR2122004G)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110382306006205&w=2'}, {'name': '101782', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1'}]
CVE State: PUBLISHED
Explain CVE-2004-1363
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.
Affected Products: n/a
References: [{'name': 'oracle-extproc-library-bo(18659)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18659'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/oracle23122004.txt'}, {'name': '20041223 Oracle extproc buffer overflow (#NISR23122004A)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110382345829397&w=2'}, {'name': 'VU#316206', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/316206'}, {'name': 'TA04-245A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-245A.html'}, {'name': '10871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10871'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf'}, {'name': '101782', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1'}]
CVE State: PUBLISHED