Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2004-0249
PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable to reference another userID.
Affected Products: n/a
References: [{'name': 'phpx-cookie-account-hijacking(15052)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15052'}, {'name': 'phpx-session-hijack(15512)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15512'}, {'name': '9569', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9569'}, {'name': '10797', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10797/'}, {'name': '20040316 PHPX 2.x - 3.2.4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2004-03/0154.html'}, {'name': '20040203 Multiple Vulnerabilities in PHPX', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107586932324901&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0250
SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the product parameter in showproduct.php or (2) the cat parameter in showcat.php.
Affected Products: n/a
References: [{'name': 'photopostphp-sql-injection(15008)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15008'}, {'name': '20040204 ZH2004-04SA (security advisory): Multiple Sql Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107593114909696&w=2'}, {'name': '9557', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9557'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.org/en/advisories/read/id=3864/'}]
CVE State: PUBLISHED
Explain CVE-2004-0251
Cross-site scripting (XSS) vulnerability in rxgoogle.cgi allows remote attackers to execute arbitrary script as other users via the query parameter.
Affected Products: n/a
References: [{'name': '20040204 rxgoogle.cgi XSS Vulnerability.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107594183924958&w=2'}, {'name': 'rxgoogle-query-xss(15043)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15043'}, {'name': '9575', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9575'}]
CVE State: PUBLISHED
Explain CVE-2004-0252
TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service (CPU consumption) via an empty USER name.
Affected Products: n/a
References: [{'name': '20040204 TYPSoft FTP Server 1.10 may be crashed', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107591511716707&w=2'}, {'name': 'typsoft-empty-username-dos(15048)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15048'}, {'name': '9573', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9573'}, {'name': '1008943', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2004/Feb/1008943.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0253
IBM Cloudscape 5.1 running jdk 1.4.2_03 allows remote attackers to execute arbitrary programs or cause a denial of service via certain SQL code, possibly due to a SQL injection vulnerability.
Affected Products: n/a
References: [{'name': '20040205 IBM cloudscape SQL Database (DB2J) vulnerable to remote command', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107604065819233&w=2'}, {'name': 'cloudscape-sql-injection(15067)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15067'}, {'name': '9583', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9583'}]
CVE State: PUBLISHED
Explain CVE-2004-0254
Cross-site scripting (XSS) vulnerability in Discuz! Board 2.x and 3.x allows remote attackers to execute arbitrary script as other users via an img tag.
Affected Products: n/a
References: [{'name': '9584', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9584'}, {'name': 'discuzboard-image-tag-xss(15066)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15066'}, {'name': '20040205 Possible Cross Site Scripting in Discuz! Board', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107606726417150&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0255
Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . (dot) and / (slash) characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow.
Affected Products: n/a
References: [{'name': '9585', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9585'}, {'name': 'xlight-long-string-dos(15064)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15064'}, {'name': '20040205 Remote crash Xlight ftp server 1.52', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107605633904122&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0256
GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp.
Affected Products: n/a
References: [{'name': '9530', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9530'}, {'name': '3795', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3795'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.geocrawler.com/mail/msg.php3?msg_id=3438808&list=405'}, {'name': 'libtool-insecure-temp-directory(15017)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15017'}, {'name': 'CLA-2004:811', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000811'}, {'name': '20040130 Symlink Vulnerability in GNU libtool <1.5.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/352333'}, {'name': '10777', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10777'}]
CVE State: PUBLISHED
Explain CVE-2004-0257
OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service (crash) by sending an IPv6 packet with a small MTU to a listening port and then issuing a TCP connect to that port.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.guninski.com/obsdmtu.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openbsd.org/cgi-bin/cvsweb/src/sys/netinet6/ip6_output.c'}, {'name': '20040205 OpenBSD IPv6 remote kernel crash', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107604603226564&w=2'}, {'name': '20040204 Remote openbsd crash with ip6, yet still openbsd much better than windows', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016704.html'}, {'name': '3825', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3825'}, {'name': 'openbsd-ipv6-dos(15044)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15044'}, {'name': '9577', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9577'}, {'name': 'NetBSD-SA2004-002', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-002.txt.asc'}]
CVE State: PUBLISHED
Explain CVE-2004-0258
Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via malformed (1) .RP, (2) .RT, (3) .RAM, (4) .RPM or (5) .SMIL files.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/realone.txt'}, {'name': 'realoneplayer-multiple-file-bo(15040)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15040'}, {'name': 'O-075', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-075.shtml'}, {'name': '20040204 [VulnWatch] Multiple File Format Vulnerabilities (Overruns) in REALOne & RealPlayer', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0027.html'}, {'name': 'VU#473814', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/473814'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.service.real.com/help/faq/security/040123_player/EN/'}, {'name': '9579', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9579'}, {'name': '20040204 Multiple File Format Vulnerabilities (Overruns) in REALOne & RealPlayer', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107608748813559&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0259
The check_referer() function in Formmail.php 5.0 and earlier allows remote attackers to bypass access restrictions via an empty or spoofed HTTP Referer, as demonstrated using an application on the same web server that contains a cross-site scripting (XSS) issue.
Affected Products: n/a
References: [{'name': '20040206 formmail (PHP) Upload file using CSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107619109629629&w=2'}, {'name': '9591', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9591'}, {'name': 'jack-formmail-file-upload(15079)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15079'}]
CVE State: PUBLISHED
Explain CVE-2004-0260
The AddToMailingList function in CactuSoft CactuShop 5.0 Lite contains a backdoor that allows remote attackers to delete arbitrary files via an email address that starts with |||.
Affected Products: n/a
References: [{'name': '20040206 CactuSoft CactuShop 5.0 Lite shopping cart software backdoor', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107619501815888&w=2'}, {'name': 'cactushoplite-backdoor(15063)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15063'}, {'name': '9589', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9589'}, {'name': '20040206 CactuSoft CactuShop 5.0 Lite shopping cart software backdoor', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016819.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0261
oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and access the control panel via a 0 in the uid parameter.
Affected Products: n/a
References: [{'name': '20040206 Open Journal Blog Authenticaion Bypassing Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107619136600713&w=2'}, {'name': 'openjournal-uid-admin-access(15069)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15069'}, {'name': '3872', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3872'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.grohol.com/downloads/oj/latest/changelog.txt'}, {'name': '9598', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9598'}]
CVE State: PUBLISHED
Explain CVE-2004-0262
Stack-based buffer overflow in The Palace 3.5 and earlier client allows remote attackers to execute arbitrary code via a link to a palace:// url followed by a long server address string.
Affected Products: n/a
References: [{'name': '9602', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9602'}, {'name': 'palace-server-address-bo(15074)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15074'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.elitehaven.net/thepalace.txt'}, {'name': '20040207 The Palace 3.x (Client) Stack Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107634556632195&w=2'}, {'name': '20040207 The Palace 3.x (Client) Stack Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0033.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0263
PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information.
Affected Products: n/a
References: [{'name': '3878', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3878'}, {'name': '9599', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9599'}, {'name': 'php-virtualhost-info-disclosure(15072)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15072'}, {'name': 'GLSA-200402-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200402-01.xml'}]
CVE State: PUBLISHED
Explain CVE-2004-0264
palmhttpd for PalmOS allows remote attackers to cause a denial of service (crash) by establishing two simultaneous HTTP connections, which exceeds the PalmOS accept queue.
Affected Products: n/a
References: [{'name': 'palmhttpd-accept-bo(15090)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15090'}, {'name': '9608', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9608'}, {'name': '20040208 PalmOS httpd accept() queue overflow DoS vulnerability.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107634638201570&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0265
Cross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows remote attackers to execute arbitrary script as other users via URL-encoded (1) title or (2) fname parameters in the News or Reviews modules.
Affected Products: n/a
References: [{'name': '20040208 [waraxe-2004-SA#002] - Cross-Site Scripting (XSS) in Php-Nuke 7.1.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107634727520936&w=2'}, {'name': '9605', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9605'}, {'name': 'phpnuke-mulitple-xss(15076)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15076'}, {'name': '9613', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9613'}]
CVE State: PUBLISHED
Explain CVE-2004-0266
SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x to 7.1.0 allows remote attackers to obtain the administrator password via the c_mid parameter.
Affected Products: n/a
References: [{'name': 'phpnuke-publicmessage-sql-injection(15080)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15080'}, {'name': '9615', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9615'}, {'name': '20040208 [waraxe-2004-SA#003] - SQL injection in Php-Nuke 7.1.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107635110327066&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0267
The (1) inoregupdate, (2) uniftest, or (3) unimove scripts in eTrust InoculateIT for Linux 6.0 allow local users to overwrite arbitrary files via a symlink attack on files in /tmp.
Affected Products: n/a
References: [{'name': '10833', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10833'}, {'name': '4735', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4735'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.excluded.org/advisories/advisory10.txt'}, {'name': '20040209 [local problems] eTrust Virus Protection 6.0 InoculateIT for linux', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107635584431518&w=2'}, {'name': 'etrust-inoculateit-symlink(15102)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15102'}, {'name': '9616', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9616'}, {'name': '4855', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4855'}, {'name': '4856', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4856'}]
CVE State: PUBLISHED
Explain CVE-2004-0268
Multiple buffer overflows in EvolutionX 3921 and 3935 allow remote attackers to cause a denial of service (hang) via (1) a long cd command to the FTP server, or (2) a long dir command to the telnet server.
Affected Products: n/a
References: [{'name': 'evolutionx-command-line-dos(15104)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15104'}, {'name': "20040210 XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow", 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016988.html'}, {'name': "20040210 XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107643394724891&w=2'}, {'name': '9631', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9631'}]
CVE State: PUBLISHED
Explain CVE-2004-0269
SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module.
Affected Products: n/a
References: [{'name': '9630', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9630'}, {'name': '20040210 [SCAN Associates Sdn Bhd Security Advisory] PHPNuke 6.9 > and below SQL Injection in multiple module', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107643348117646&w=2'}, {'name': 'phpnuke-modules-sql-injection(15115)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15115'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.scan-associates.net/papers/phpnuke69.txt'}]
CVE State: PUBLISHED
Explain CVE-2004-0270
libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid line length (e.g., a lowercase character), which causes an assert error in clamd that terminates the calling program.
Affected Products: n/a
References: [{'name': 'GLSA-200402-07', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200402-07.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.freebsd.org/cgi/query-pr.cgi?pr=62586'}, {'name': '9610', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9610'}, {'name': '20040209 clamav 0.65 remote DOS exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107634700823822&w=2'}, {'name': '3894', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3894'}, {'name': 'clam-antivirus-uuencoded-dos(15077)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15077'}]
CVE State: PUBLISHED
Explain CVE-2004-0271
Multiple cross-site scripting vulnerabilities (XSS) in MaxWebPortal allow remote attackers to execute arbitrary web script as other users via (1) the sub_name parameter of dl_showall.asp, (2) the SendTo parameter in Personal Messages, (3) the HTTP_REFERER for down.asp, or (4) the image name of an Avatar in the register form.
Affected Products: n/a
References: [{'name': '20040210 XSS, Sql Injection and Avatar ScriptCode Injection in MaxWebPortal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107643014606515&w=2'}, {'name': '9625', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9625'}, {'name': 'maxwebportal-register-xss(15122)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15122'}, {'name': 'maxwebportal-multiple-xss(15120)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15120'}]
CVE State: PUBLISHED
Explain CVE-2004-0272
SQL injection vulnerability in MaxWebPortal allows remote attackers to inject arbitrary SQL code and gain sensitive information via the SendTo parameter in Personal Messages.
Affected Products: n/a
References: [{'name': '20040210 XSS, Sql Injection and Avatar ScriptCode Injection in MaxWebPortal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107643014606515&w=2'}, {'name': '9625', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9625'}, {'name': 'maxwebportal-personalmesssages-sql-injection(15121)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15121'}]
CVE State: PUBLISHED
Explain CVE-2004-0273
Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via an RMP file that contains .. (dot dot) sequences in a .rjs skin file.
Affected Products: n/a
References: [{'name': 'VU#514734', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/514734'}, {'name': 'realoneplayer-rmp-directory-traversal(15123)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15123'}, {'name': '20040210 Directory traversal in RealPlayer allows code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107642978524321&w=2'}, {'name': '9580', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9580'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://service.real.com/help/faq/security/040123_player/EN/'}]
CVE State: PUBLISHED
Explain CVE-2004-0274
Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STAT_OFFERED status to a bot that is not a sharebot, which allows remote attackers to use STAT_OFFERED to promote a bot to a sharebot and conduct unauthorized activities.
Affected Products: n/a
References: [{'name': '20040210 Re: Eggrop bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107643315623958&w=2'}, {'name': '20040208 Eggrop bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107634593827102&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://mogan.nonsoloirc.com/egg_advisory.txt'}, {'name': '9606', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9606'}, {'name': '3928', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3928'}, {'name': 'eggdrop-sharemod-gain-access(15084)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15084'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.eggheads.org/news/2004/04/10/26'}]
CVE State: PUBLISHED
Explain CVE-2004-0275
SQL injection vulnerability in calendar_download.php in BosDates 3.2 and earlier allows remote attackers to obtain sensitive information and gain access via the calendar parameter.
Affected Products: n/a
References: [{'name': '20040211 ZH2004-05SA (security advisory): Sql Injection Vulnerability in BosDates', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107651618613575&w=2'}, {'name': '9639', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9639'}, {'name': 'bosdates-calendar-sql-injection(15133)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15133'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.org/en/advisories/read/id=3925/'}]
CVE State: PUBLISHED
Explain CVE-2004-0276
The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request with a sequence of "%" characters and a missing Host field.
Affected Products: n/a
References: [{'name': 'monkey-getrealstring-dos(15187)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15187'}, {'name': '20040211 Denial of Service in Monkey httpd <= 0.8.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107652610506968&w=2'}, {'name': '9642', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9642'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/poc/monkeydos.zip'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://monkeyd.sourceforge.net/'}, {'name': '3921', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3921'}]
CVE State: PUBLISHED
Explain CVE-2004-0277
Format string vulnerability in Dream FTP 1.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the username.
Affected Products: n/a
References: [{'name': '9600', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9600'}, {'name': 'dreamftp-username-format-string(15070)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15070'}, {'name': '20040211 Re: [Full-Disclosure] DreamFTP Server 1.02 Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107656166402882&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/modules.php?name=News&file=article&sid=1722'}, {'name': '20040207 DreamFTP Server 1.02 Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016871.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0278
Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data than specified, which causes Ratbag to repeatedly check the socket for more data.
Affected Products: n/a
References: [{'name': '9644', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9644'}, {'name': 'ratbag-data-length-dos(15188)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15188'}, {'name': "20040211 Denial of Service in Ratbag's game engine", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107655269820530&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0279
AIM Sniff (aimSniff.pl) 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log.
Affected Products: n/a
References: [{'name': 'aim-sniff-symlink(15199)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15199'}, {'name': '9653', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9653'}, {'name': '20040212 aimSniff.pl file "deletion" (local)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107662243303439&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0280
Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends in a "%20" (encoded space character), e.g. index.jsp%20.
Affected Products: n/a
References: [{'name': 'resin-source-disclosure(15085)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15085'}, {'name': '9614', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9614'}, {'name': '20040205 Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access Resin Forbidden Directory ("/WEB-INF/")', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107635084830547&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0281
Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-INF" in Windows.
Affected Products: n/a
References: [{'name': '9617', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9617'}, {'name': 'resin-dotdot-directory-traversal(15087)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15087'}, {'name': '20040205 Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access Resin Forbidden Directory ("/WEB-INF/")', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107635084830547&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0282
Crob FTP daemon 3.5.2 allows remote attackers to cause a denial of service (crash) by repeatedly connecting to and disconnecting from the server.
Affected Products: n/a
References: [{'name': '9651', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9651'}, {'name': '20040212 crob ftpd Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107665920909374&w=2'}, {'name': 'crob-multiple-connections-dos(15201)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15201'}, {'name': '10882', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10882'}, {'name': '6621', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6621'}]
CVE State: PUBLISHED
Explain CVE-2004-0283
Mailmgr 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/mailmgr.unsort, (2) /tmp/mailmgr.tmp, or (3) /tmp/mailmgr.sort.
Affected Products: n/a
References: [{'name': '9654', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9654'}, {'name': 'mailmgr-insecure-temp-directory(15203)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15203'}, {'name': '20040212 Symlink vulnerabilities in mailmgr', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107665013714517&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0284
Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CPU consumption), if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters (%00) after the host name.
Affected Products: n/a
References: [{'name': '9629', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9629'}, {'name': 'ie-host-null-dos(15127)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15127'}, {'name': '20040210 ASPR #2004-01-20-1: Internet Explorer/Outlook double null character DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107643134712133&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0285
PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and (3) AllMyGuests allow remote attackers to execute arbitrary PHP code via a URL in the _AMVconfig[cfg_serverpath] parameter.
Affected Products: n/a
References: [{'name': '6721', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6721'}, {'name': 'allmyvisitors-file-include(15228)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15228'}, {'name': 'allmyguests-php-file-include(15227)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15227'}, {'name': '20040214 AllMyGuests PHP Code Injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107696209514155&w=2'}, {'name': '20040214 AllMyLinks PHP Code Injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107696291728750&w=2'}, {'name': '9664', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9664'}, {'name': '20040214 AllMyVisitors PHP Code Injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107696235424865&w=2'}, {'name': 'allmylinks-file-include(15226)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15226'}]
CVE State: PUBLISHED
Explain CVE-2004-0286
Buffer overflow in RobotFTP 1.0 and 2.0 beta 1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long username.
Affected Products: n/a
References: [{'name': '9672', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9672'}, {'name': '20040215 buffer overflow in Robot FTP Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107696194306878&w=2'}, {'name': 'robot-username-bo(15225)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15225'}]
CVE State: PUBLISHED
Explain CVE-2004-0287
Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service (crash) via a RETR command with a long argument containing a large number of / (slash) characters, possibly triggering a buffer overflow.
Affected Products: n/a
References: [{'name': '9668', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9668'}, {'name': 'xlight-retr-dos(15220)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15220'}, {'name': '20040215 Xlight ftp server 1.52 RETR bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107695172917263&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0288
Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexing a large document.
Affected Products: n/a
References: [{'name': 'mnogosearch-udmdoctotextbuf-bo(15209)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15209'}, {'name': '9667', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9667'}, {'name': '20040215 Buffer overflow in mnoGoSearch', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107695139930726&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0289
Buffer overflow in sdbscan in SignatureDB 0.1.1 allows local users to cause a denial of service (segmentation fault) via a database file that contains a large key parameter.
Affected Products: n/a
References: [{'name': '9661', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9661'}, {'name': 'signaturedb-sdbscan-bo(15217)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15217'}, {'name': "20040215 problems with database files in 'SignatureDB'", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107695113832648&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0290
Buffer overflow in Purge Jihad 2.0.1 and earlier allows remote game servers to execute arbitrary code via an information packet that contains large (1) battle type and (2) map name fields.
Affected Products: n/a
References: [{'name': '9671', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9671'}, {'name': 'purge-battletype-map-bo(15216)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15216'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://purge.worthplaying.com/phpbb/viewtopic.php?t=1167'}, {'name': '20040216 Broadcast client buffer-overflow in Purge Jihad <= 2.0.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107695064204362&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0291
SQL injection vulnerability in post.php for YaBB SE 1.5.4 and 1.5.5 allows remote attackers to obtain hashed passwords via the quote parameter.
Affected Products: n/a
References: [{'name': '20040216 Another YabbSE SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107696318522985&w=2'}, {'name': 'yabb-post-sql-injection(15224)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15224'}, {'name': '9674', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9674'}]
CVE State: PUBLISHED
Explain CVE-2004-0292
Buffer overflow in KarjaSoft Sami HTTP Server 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
Affected Products: n/a
References: [{'name': 'sami-http-get-bo(15237)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15237'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/modules.php?name=News&file=article&sid=1746'}, {'name': '20040217 KarjaSoft Sami HTTP Server 1.0.4 Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107703630913205&w=2'}, {'name': '9679', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9679'}]
CVE State: PUBLISHED
Explain CVE-2004-0293
Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. (dot dot) in a HTTP request to (1) gotopage.cgi or (2) genindexpage.cgi.
Affected Products: n/a
References: [{'name': 'shopcartcgi-dotdot-directory-traversal(14982)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14982'}, {'name': '9670', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9670'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.org/en/advisories/read/id=3962/'}, {'name': '20040217 ZH2004-06SA (security advisory): ShopCartCGI v2.3 Remote', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107703602707450&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0294
YaBB 1 SP 1.3.1 displays different error messages when a user exists or not, which makes it easier for remote attackers to identify valid users and conduct a brute force password guessing attack.
Affected Products: n/a
References: [{'name': 'yabb-invalidmessage-obtain-information(15236)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15236'}, {'name': '20040217 YABB information leakage on failed login', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107703591314745&w=2'}, {'name': '9677', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9677'}]
CVE State: PUBLISHED
Explain CVE-2004-0295
TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a denial of service (CPU consumption) via an open idle connection.
Affected Products: n/a
References: [{'name': '20040217 Broker FTP DoS (Message Server)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107705346817241&w=2'}, {'name': '9680', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9680'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/windowsntfocus/5IP0B0AC1I.html'}, {'name': 'broker-ftp-tsftpsrv-dos(15242)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15242'}]
CVE State: PUBLISHED
Explain CVE-2004-0296
TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a TsFtpSrv.exe to exit with an exception by opening and immediately closing a connection.
Affected Products: n/a
References: [{'name': '20040217 Broker FTP DoS (Message Server)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107705346817241&w=2'}, {'name': '9680', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9680'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/windowsntfocus/5IP0B0AC1I.html'}, {'name': 'broker-ftp-dos(15241)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15241'}]
CVE State: PUBLISHED
Explain CVE-2004-0297
Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length.
Affected Products: n/a
References: [{'name': 'VU#972334', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/972334'}, {'name': '9682', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9682'}, {'name': '20040217 Ipswitch IMail LDAP Daemon Remote Buffer Overflow', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=74'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ipswitch.com/support/imail/releases/imail_professional/im805HF2.html'}, {'name': 'imail-ldap-tag-bo(15243)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15243'}, {'name': '3984', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3984'}]
CVE State: PUBLISHED
Explain CVE-2004-0298
CesarFTP 0.99e allows remote attackers to cause a denial of service (CPU consumption) via a long RETR parameter.
Affected Products: n/a
References: [{'name': 'cesarftp-userpass-dos(15252)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15252'}, {'name': '9666', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9666'}, {'name': '20040217 CesarFTP 0.99 : 100% employment of computer resources', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107712057628250&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0299
Buffer overflow in smallftpd 0.99 allows local users to cause a denial of service (crash) via an FTP request with a large number of "/" (slash) characters.
Affected Products: n/a
References: [{'name': '9684', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9684'}, {'name': 'smallftpd-forwardslash-dos(15262)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15262'}, {'name': '20040217 Smallftpd 1.0.3 DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107714207708375&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0300
SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via (1) the cat parameter in shop.php, (2) the id parameter in more.php, (3) the cat_manufacturer parameter in shop_by_brand.php, or (4) the id parameter in listing.php.
Affected Products: n/a
References: [{'name': '9676', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9676'}, {'name': '9687', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9687'}, {'name': '3973', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3973'}, {'name': '20040218 ZH2004-07SA (security advisory): Multiple Sql injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107712117913185&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.org/en/advisories/read/id=3972/'}, {'name': '1009092', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/alerts/2004/Feb/1009092.html'}, {'name': '10902', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10902/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.systemsecure.org/advisories/ssadvisory16022004.php'}, {'name': 'onlinestorekit-more-sql-injection(15232)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15232'}]
CVE State: PUBLISHED
Explain CVE-2004-0301
Cross-site scripting (XSS) vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id parameter.
Affected Products: n/a
References: [{'name': '9676', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9676'}, {'name': '10902', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10902/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.systemsecure.org/advisories/ssadvisory16022004.php'}, {'name': 'onlinestorekit-more-xss(15235)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15235'}, {'name': '1009079', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/alerts/2004/Feb/1009079.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0302
Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) file parameter in index.php, (2) editfile in glossary.php, or (3) editfile in newmultiplechoice.php.
Affected Products: n/a
References: [{'name': '20040218 ZH2004-08SA (security advisory): OWLS 1.0 Remote arbitrary files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107712123305706&w=2'}, {'name': 'owls-file-retrieval(15249)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15249'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.org/en/advisories/read/id=3973/'}, {'name': '9689', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9689'}]
CVE State: PUBLISHED
Explain CVE-2004-0303
OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossaries/index.php, (2) the filename parameter in /readings/index.php, or (3) the filename parameter in /multiplechoice/resultsignore.php, as demonstrated using /etc/passwd.
Affected Products: n/a
References: [{'name': '20040218 ZH2004-08SA (security advisory): OWLS 1.0 Remote arbitrary files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107712123305706&w=2'}, {'name': 'owls-file-retrieval(15249)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15249'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.org/en/advisories/read/id=3973/'}, {'name': '9689', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9689'}]
CVE State: PUBLISHED