Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2004-1455
Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL.
Affected Products: n/a
References: [{'name': '12194', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12194/'}, {'name': '20040817 Open Security Group Advisory #6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109284737628045&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://open-security.org/advisories/6'}, {'name': '10890', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10890'}, {'name': 'xine-vcd-identifier-bo(16930)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16930'}, {'name': 'GLSA-200408-18', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-18.xml'}]
CVE State: PUBLISHED
Explain CVE-2004-1456
filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.
Affected Products: n/a
References: [{'name': '10878', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10878'}, {'name': 'VU#770816', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/770816'}, {'name': '8373', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8373'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cvstrac.org/cvstrac/chngview?cn=316'}, {'name': 'cvstrac-command-execute(16929)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16929'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cvstrac.org/cvstrac/tktview?tn=339'}, {'name': '20040805 CVStrac Remote Arbitrary Code Execution exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109173359428253&w=2'}, {'name': '12090', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12090/'}]
CVE State: PUBLISHED
Explain CVE-2004-1457
The Virtual Private Network (VPN) capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of service (ABEND in IKE.NLM) via a malformed IKE packet, as sent by the Striker ISAKMP Protocol Test Suite.
Affected Products: n/a
References: [{'name': '12067', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12067/'}, {'name': 'novell-bordermanger-ikenlm-dos(16697)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16697'}, {'name': 'VU#432097', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/432097'}, {'name': '10727', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10727'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/10093576.htm'}]
CVE State: PUBLISHED
Explain CVE-2004-1458
The CSAdmin web administration interface for Cisco Secure Access Control Server (ACS) 3.2(2) build 15 allows remote attackers to cause a denial of service (hang) via a flood of TCP connections to port 2002.
Affected Products: n/a
References: [{'name': 'ciscosecure-csadmin-tcp-dos(17114)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17114'}, {'name': '9182', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/9182'}, {'name': '12386', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12386/'}, {'name': 'O-203', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-203.shtml'}, {'name': '11047', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11047'}, {'name': '20040825 Multiple Vulnerabilities in Cisco Secure Access Control Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml'}]
CVE State: PUBLISHED
Explain CVE-2004-1459
Cisco Secure Access Control Server (ACS) 3.2, when configured as a Light Extensible Authentication Protocol (LEAP) RADIUS proxy, allows remote attackers to cause a denial of service (device crash) via certain LEAP authentication requests.
Affected Products: n/a
References: [{'name': '11047', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11047'}, {'name': 'ciscosecure-leap-radius-dos(17116)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17116'}, {'name': '20040825 Multiple Vulnerabilities in Cisco Secure Access Control Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml'}]
CVE State: PUBLISHED
Explain CVE-2004-1460
Cisco Secure Access Control Server (ACS) 3.2(3) and earlier, when configured with an anonymous bind in Novell Directory Services (NDS) and authenticating NDS users with NDS, allows remote attackers to gain unauthorized access to AAA clients via a blank password.
Affected Products: n/a
References: [{'name': '11047', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11047'}, {'name': 'ciscosecure-nds-blank-authentication(17117)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17117'}, {'name': '20040825 Multiple Vulnerabilities in Cisco Secure Access Control Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml'}]
CVE State: PUBLISHED
Explain CVE-2004-1461
Cisco Secure Access Control Server (ACS) 3.2(3) and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers to bypass authentication by connecting to that port from the same IP address.
Affected Products: n/a
References: [{'name': 'ciscosecure-csadmin-auth-bypass(17118)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17118'}, {'name': '11047', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11047'}, {'name': '20040825 Multiple Vulnerabilities in Cisco Secure Access Control Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml'}]
CVE State: PUBLISHED
Explain CVE-2004-1462
Unknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized access to administrator functions such as (1) revert and (2) delete.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://sourceforge.net/project/shownotes.php?group_id=8482&release_id=254801'}, {'name': 'moinmoin-acl-gain-privileges(16833)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16833'}, {'name': 'GLSA-200408-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-25.xml'}, {'name': '10805', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10805'}, {'name': '8194', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/displayvuln.php?osvdb_id=8194'}]
CVE State: PUBLISHED
Explain CVE-2004-1463
Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact.
Affected Products: n/a
References: [{'name': '8195', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/displayvuln.php?osvdb_id=8195'}, {'name': '10801', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10801'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?group_id=8482&release_id=254801'}, {'name': 'GLSA-200408-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-25.xml'}, {'name': 'moinmoin-pageeditor-gain-privilege(16832)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16832'}]
CVE State: PUBLISHED
Explain CVE-2004-1464
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.
Affected Products: n/a
References: [{'name': 'cisco-ios-telnet-dos(17131)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17131'}, {'name': '1011079', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011079'}, {'name': 'VU#384230', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/384230'}, {'name': '12395', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12395/'}, {'name': '20040827 Cisco Telnet Denial of Service Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml'}, {'name': '11060', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11060'}]
CVE State: PUBLISHED
Explain CVE-2004-1465
Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line.
Affected Products: n/a
References: [{'name': '20040901 WinZip Unspecified Buffer Overflows May Let Remote or Local Users Execute Arbitrary Code', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109416099301369&w=2'}, {'name': 'winzip-command-line-bo(17197)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17197'}, {'name': '11092', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11092'}, {'name': 'winzip-code-execution(17192)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17192'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.winzip.com/wz90sr1.htm'}, {'name': '1011132', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011132'}, {'name': 'O-211', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-211.shtml'}]
CVE State: PUBLISHED
Explain CVE-2004-1466
The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 seconds after they have been uploaded using save_photos.php, which allows remote attackers to upload and execute execute arbitrary scripts before they are deleted, if the temporary directory is under the web root.
Affected Products: n/a
References: [{'name': '10968', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10968'}, {'name': 'gallery-savephotos-file-upload(17021)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17021'}, {'name': '20040817 Gallery 1.4.4 save_photos.php PHP Insertion Proof of Concept', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0757.html'}, {'name': 'GLSA-200409-05', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-05.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=134&mode=thread&order=0&thold=0'}]
CVE State: PUBLISHED
Explain CVE-2004-1467
Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.0.00.003 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) date or search text field in the calendar module, (2) Field parameter, Filter parameter, QField parameter, Start parameter or Search field in the address module, (3) Subject field in the message module or (4) Subject field in the Ticket module.
Affected Products: n/a
References: [{'name': 'GLSA-200409-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-06.xml'}, {'name': '11013', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11013'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/forum/forum.php?forum_id=401807'}, {'name': '20040822 Multiple Cross Site Scripting Vulnerabilities in eGroupWare', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/372603'}, {'name': 'egroupware-mult-modules-xss(17078)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17078'}]
CVE State: PUBLISHED
Explain CVE-2004-1468
The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message.
Affected Products: n/a
References: [{'name': '11122', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11122'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/77_e.html'}, {'name': '12488', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12488/'}, {'name': 'GLSA-200409-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-15.xml'}, {'name': 'usermin-web-mail-command-execution(17293)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17293'}]
CVE State: PUBLISHED
Explain CVE-2004-1469
Format string vulnerability in the log function in SUS 2.0.2, and other versions before 2.0.6, allows local users to execute arbitrary code via format string specifiers in a command line argument that is passed directly to syslog.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://security.lss.hr/index.php?page=details&ID=LSS-2004-09-01'}, {'name': 'GLSA-200409-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-17.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://pdg.uow.edu.au/sus/CHANGES'}, {'name': '20040914 SUS 2.0.2 local root vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109517782910407&w=2'}, {'name': '11176', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11176'}, {'name': 'sus-log-format-string(17361)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17361'}]
CVE State: PUBLISHED
Explain CVE-2004-1470
CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server.
Affected Products: n/a
References: [{'name': 'snipsnap-response-splitting(17364)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17364'}, {'name': '11180', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11180'}, {'name': 'GLSA-200409-23', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-23.xml'}, {'name': '20040914 ADVISORY: http response splitting in snipsnap', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109518773223511&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.snipsnap.org/space/start'}]
CVE State: PUBLISHED
Explain CVE-2004-1471
Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/092004.html'}, {'name': '10499', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10499'}, {'name': 'FreeBSD-SA-04:14', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:14.cvs.asc'}, {'name': 'cvs-wrapper-format-string(16365)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16365'}, {'name': '20040609 Advisory 09/2004: More CVS remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1472
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service (device freeze) via a fast UDP port scan on the WAN interface.
Affected Products: n/a
References: [{'name': '12635', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12635'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html'}, {'name': '20040922 Multiple Vulnerabilities in Symantec Enterprise Firewall/Gateway Security Products', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109588376426070&w=2'}, {'name': 'symantec-firewallvpn-udp-dos(17469)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17469'}, {'name': 'VU#441078', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/441078'}, {'name': '11237', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11237'}, {'name': '10204', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10204'}]
CVE State: PUBLISHED
Explain CVE-2004-1473
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.
Affected Products: n/a
References: [{'name': 'symantec-udp-obtain-info(17470)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17470'}, {'name': '12635', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12635'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html'}, {'name': '20040922 Multiple Vulnerabilities in Symantec Enterprise Firewall/Gateway Security Products', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109588376426070&w=2'}, {'name': '11237', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11237'}, {'name': '10205', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10205'}, {'name': 'VU#329230', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/329230'}]
CVE State: PUBLISHED
Explain CVE-2004-1474
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.
Affected Products: n/a
References: [{'name': '12635', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12635'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html'}, {'name': 'VU#173910', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/173910'}, {'name': '20040922 Multiple Vulnerabilities in Symantec Enterprise Firewall/Gateway Security Products', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109588376426070&w=2'}, {'name': '10206', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10206'}, {'name': 'symantec-default-snmp(17471)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17471'}, {'name': '11237', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11237'}]
CVE State: PUBLISHED
Explain CVE-2004-1475
Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1) long VideoCD vcd:// MRLs or (2) long subtitle lines.
Affected Products: n/a
References: [{'name': '11206', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11206'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xinehq.de/index.php/security/XSA-2004-4'}, {'name': '20040907 XSA-2004-4: multiple string overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/375485/2004-09-02/2004-09-08/0'}, {'name': 'xine-subtitle-bo(17432)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17432'}, {'name': 'GLSA-200408-18', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200408-18.xml'}, {'name': 'xine-videocd-mrl-bo(17430)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17430'}, {'name': 'GLSA-200409-30', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-30.xml'}]
CVE State: PUBLISHED
Explain CVE-2004-1476
Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label.
Affected Products: n/a
References: [{'name': '11206', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11206'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xinehq.de/index.php/security/XSA-2004-4'}, {'name': '20040907 XSA-2004-4: multiple string overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/375485/2004-09-02/2004-09-08/0'}, {'name': 'GLSA-200409-30', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-30.xml'}, {'name': 'xine-videocd-disk-bo(17431)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17431'}]
CVE State: PUBLISHED
Explain CVE-2004-1477
Cross-site scripting (XSS) vulnerability in the Management Console in JRun 4.0 allows remote attackers to execute arbitrary web script or HTML and possibly hijack a user's session.
Affected Products: n/a
References: [{'name': 'VU#668206', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/668206'}, {'name': '20040923 New Macromedia Security Zone Bulletins Posted', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109621995623823&w=2'}, {'name': 'jrun-management-console-xss(17483)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17483'}, {'name': '11245', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11245'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html'}, {'name': '12638', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12638/'}]
CVE State: PUBLISHED
Explain CVE-2004-1478
JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user's HTTP session.
Affected Products: n/a
References: [{'name': 'jrun-jsessionid-hijack(17481)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17481'}, {'name': '20040923 New Macromedia Security Zone Bulletins Posted', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109621995623823&w=2'}, {'name': '11245', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11245'}, {'name': 'VU#584958', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/584958'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html'}, {'name': '12638', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12638/'}]
CVE State: PUBLISHED
Explain CVE-2004-1480
Unknown vulnerability in the management station in HP StorageWorks Command View XP 1.8B and earlier allows remote attackers to bypass access restrictions.
Affected Products: n/a
References: [{'name': 'SSRT4794', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBST01071'}, {'name': '1011407', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011407'}, {'name': '11249', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11249'}, {'name': 'hp-storageworks-restriction-bypass(17490)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17490'}]
CVE State: PUBLISHED
Explain CVE-2004-1481
Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based buffer overflow.
Affected Products: n/a
References: [{'name': '11309', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11309'}, {'name': '20041001 EEYE: RealPlayer pnen3260.dll Heap Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=109708374115061&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.service.real.com/help/faq/security/040928_player/EN/'}, {'name': '12672', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12672'}, {'name': 'realplayer-rm-code-execution(17549)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17549'}]
CVE State: PUBLISHED
Explain CVE-2004-1482
The sbuf_getmsg function in BNC incorrectly handles backspace characters, which could allow remote attackers to bypass authentication and gain access to arbitrary scripts.
Affected Products: n/a
References: [{'name': '11355', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11355'}, {'name': '12770', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12770/'}, {'name': 'GLSA-200410-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200410-13.xml'}, {'name': 'bnc-backspace-command-execution(17672)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17672'}, {'name': '10596', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10596'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.gotbnc.com/changes.html#2.8.9'}]
CVE State: PUBLISHED
Explain CVE-2004-1483
Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series 5.0 have unknown attack vectors and unknown impact.
Affected Products: n/a
References: [{'name': '10903', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10903'}, {'name': 'VU#760256', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/760256'}, {'name': '8508', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8508'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.symantec.com/public/english_us_canada/products/sym_clientless_vpn/sym_clientless_vpn_5/updates/hf3-readme.txt'}, {'name': 'symantec-clientless-file-browsers(16933)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16933'}, {'name': '12254', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12254/'}]
CVE State: PUBLISHED
Explain CVE-2004-1484
Format string vulnerability in the _msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy client and run with the -ly option, allows remote attackers or local users to execute arbitrary code via format string specifiers in a syslog message.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.nosystem.com.ar/advisories/advisory-07.txt'}, {'name': '12936', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12936/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.dest-unreach.org/socat/advisory/socat-adv-1.html'}, {'name': '11505', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11505'}, {'name': 'socat-format-string(17822)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17822'}, {'name': 'GLSA-200410-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200410-26.xml'}]
CVE State: PUBLISHED
Explain CVE-2004-1485
Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function.
Affected Products: n/a
References: [{'name': '11527', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11527'}, {'name': '20041026 inetutils tftp client, DNS resolving bofs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109882085912915&w=2'}, {'name': 'inetutils-tftp-dns-bo(17878)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17878'}]
CVE State: PUBLISHED
Explain CVE-2004-1486
Unknown vulnerability in Serviceguard A.11.13 through A.11.16.00 and Cluster Object Manager A.01.03 and B.01.04 through B.03.00.01 on HP-UX, Serviceguard A.11.14.04 and A.11.15.04 and Cluster Object Manager B.02.01.02 and B.02.02.02 on HP Linux, allow remote attackers to gain privileges via unknown attack vectors.
Affected Products: n/a
References: [{'name': '11507', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11507'}, {'name': '12946', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12946'}, {'name': 'hp-cluster-serviceguard-gain-privileges(17867)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17867'}, {'name': 'SSRT3526', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=109893515704267&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1487
wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences.
Affected Products: n/a
References: [{'name': 'RHSA-2005:771', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-771.html'}, {'name': '11871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11871'}, {'name': '20041209 wget: Arbitrary file overwriting/appending/creating and other vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110269474112384&w=2'}, {'name': 'USN-145-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/145-1/'}, {'name': 'wget-file-overwrite(18420)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18420'}, {'name': 'oval:org.mitre.oval:def:11682', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11682'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755'}, {'name': '1012472', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012472'}]
CVE State: PUBLISHED
Explain CVE-2004-1488
wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.
Affected Products: n/a
References: [{'name': 'RHSA-2005:771', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-771.html'}, {'name': '11871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11871'}, {'name': '20041209 wget: Arbitrary file overwriting/appending/creating and other vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110269474112384&w=2'}, {'name': 'USN-145-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/145-1/'}, {'name': 'SUSE-SR:2006:016', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_16_sr.html'}, {'name': 'wget-terminal-overwrite(18421)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18421'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755'}, {'name': 'oval:org.mitre.oval:def:9750', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9750'}, {'name': '20960', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20960'}, {'name': '1012472', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012472'}]
CVE State: PUBLISHED
Explain CVE-2004-1489
Opera 7.54 and earlier does not properly limit an applet's access to internal Java packages from Sun, which allows remote attackers to gain sensitive information, such as user names and the installation directory.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.opera.com/linux/changelogs/754u1/'}, {'name': '20041119 Java Vulnerabilities in Opera 7.54', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029044.html'}, {'name': 'GLSA-200502-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml'}]
CVE State: PUBLISHED
Explain CVE-2004-1490
Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spaces (ASCII character code 160) in the (1) Content-Disposition or (2) Content-Type headers.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.opera.com/linux/changelogs/754u1/'}, {'name': '11883', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11883'}, {'name': '12981', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12981'}, {'name': 'opera-file-type-spoofing(18423)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18423'}, {'name': 'GLSA-200502-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2004-19/advisory/'}]
CVE State: PUBLISHED
Explain CVE-2004-1491
Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a shortcut or launcher that contains an Exec entry.
Affected Products: n/a
References: [{'name': 'SUSE-SR:2005:008', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archive/suse-security-announce/2005-Mar/0007.html'}, {'name': '11901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11901'}, {'name': 'pera-kfmclient-command-execution(18457)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18457'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.org/advisories/read/id=6503'}, {'name': 'GLSA-200502-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml'}, {'name': '13447', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13447/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.opera.com/linux/changelogs/754u2/'}]
CVE State: PUBLISHED
Explain CVE-2004-1492
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (game exit) via a data packet that contains a large size specifier, which causes a large memory allocation to fail.
Affected Products: n/a
References: [{'name': '20041027 Crashs in Master of Orion III 1.2.5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109889705116038&w=2'}, {'name': '11550', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11550'}, {'name': '13008', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13008'}, {'name': 'master-of-orion-size-dos(17908)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17908'}]
CVE State: PUBLISHED
Explain CVE-2004-1493
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (server crash) via multiple connections with long nicknames, possibly triggering a buffer overflow.
Affected Products: n/a
References: [{'name': '20041027 Crashs in Master of Orion III 1.2.5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109889705116038&w=2'}, {'name': '11550', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11550'}, {'name': '13008', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13008'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.nl/0410-advisories/masterOrionIII.txt'}, {'name': 'master-of-orion-nickname-dos(17884)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17884'}]
CVE State: PUBLISHED
Explain CVE-2004-1494
Buffer overflow in the Screen Fetch option in XDICT 2002 through 2005 allows remote attackers to cause a denial of service ( CPU consumption or application exit) and possibly execute arbitrary code via a long string.
Affected Products: n/a
References: [{'name': 'xdict-screen-fetch-bo(17929)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17929'}, {'name': '20041101 XDICT Buffer OverRun Vulnerability,funny :-)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109933696831725&w=2'}, {'name': '20041101 XDICT Buffer OverRun Vulnerability,funny :-)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028241.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secway.org/Advisory/Ad20041026EN.txt'}]
CVE State: PUBLISHED
Explain CVE-2004-1495
The Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service (application crash) via a corrupt ZIP archive.
Affected Products: n/a
References: [{'name': '20041102 Medium Risk Vulnerability in WinRAR', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109941351432699&w=2'}, {'name': '13070', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13070'}, {'name': 'winrar-repair-archive(17937)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17937'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.rarlabs.com/rarnew.htm'}, {'name': '11581', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11581'}]
CVE State: PUBLISHED
Explain CVE-2004-1496
Directory traversal vulnerability in Web Forums Server 1.6 and 2.0 Power Pack allows remote attackers to read arbitrary files via a URL containing (1) "..\" (dot dot backslash), (2) "../" (dot dot slash), (3) "/%2E%2E%5C" (encoded dot dot backslash), or (4) "%2E%2E%2F" (encoded dot dot slash).
Affected Products: n/a
References: [{'name': '20041102 Multiple Vulnerabilities in Web Forums Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109943267328552&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1497
Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '20041102 Multiple Vulnerabilities in Web Forums Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109943267328552&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1498
SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary SQL commands via the messageToUserAccNum parameter.
Affected Products: n/a
References: [{'name': '13079', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13079'}, {'name': '20041102 [Hat-Squad] SQL injection and XSS Vulnerabilities in HELM', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109943858026542&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hat-squad.com/en/000077.html'}, {'name': '11586', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11586'}]
CVE State: PUBLISHED
Explain CVE-2004-1499
Cross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary web script or HTML via the Subject field.
Affected Products: n/a
References: [{'name': '13079', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13079'}, {'name': '20041102 [Hat-Squad] SQL injection and XSS Vulnerabilities in HELM', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109943858026542&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hat-squad.com/en/000077.html'}, {'name': '11586', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11586'}, {'name': 'helm-subject-xss(17943)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17943'}]
CVE State: PUBLISHED
Explain CVE-2004-1500
Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message.
Affected Products: n/a
References: [{'name': '11610', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11610'}, {'name': 'lithtech-format-string(17972)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17972'}, {'name': '17317', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17317'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/lithfs-adv.txt'}, {'name': '13116', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13116/'}, {'name': '20041105 In-game format string bug in the Lithtech engine', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109969394601331&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1501
The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) by sending a POST request with a large Content-Length value, then disconnecting without sending that amount of data.
Affected Products: n/a
References: [{'name': '602pro-mail-post-dos(17977)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17977'}, {'name': '20041106 Resources consumption in 602 Lan Suite 2004.0.04.0909', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109976745017459&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1502
The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (socket exhaustion) via a Telnet request to an IP address of the proxy's network interface, which causes a loop.
Affected Products: n/a
References: [{'name': '602pro-telnet-loopback-dos(17979)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17979'}, {'name': '20041106 Resources consumption in 602 Lan Suite 2004.0.04.0909', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109976745017459&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1503
Integer overflow in the InitialDirContext in Java Runtime Environment (JRE) 1.4.2, 1.5.0 and possibly other versions allows remote attackers to cause a denial of service (Java exception and failed DNS requests) via a large number of DNS requests, which causes the xid variable to wrap around and become negative.
Affected Products: n/a
References: [{'name': '13142', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13142'}, {'name': '20041108 DOS against Java JNDI/DNS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109994063331773&w=2'}, {'name': '11619', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11619'}, {'name': 'sun-jre-dns-dos(17990)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17990'}]
CVE State: PUBLISHED
Explain CVE-2004-1504
The displaycontent function in config.php for Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to gain sensitive information via a blank show parameter, which reveals the installation path in an error message, as demonstrated using index.php.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://echo.or.id/adv/adv08-y3dips-2004.txt'}, {'name': 'jaf-cms-path-disclosure(18006)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18006'}, {'name': '20041109 Vulnerabilities in JAF CMS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110004150430309&w=2'}]
CVE State: PUBLISHED