Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2004-0398
Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client.
Affected Products: n/a
References: [{'name': '11638', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11638'}, {'name': '11673', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11673'}, {'name': '6302', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6302'}, {'name': '20040519 Advisory 06/2004: libneon date parsing vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0982.html'}, {'name': '11650', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11650'}, {'name': '20040519 [OpenPKG-SA-2004.024] OpenPKG Security Advisory (neon)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108500057108022&w=2'}, {'name': 'GLSA-200405-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-13.xml'}, {'name': 'O-148', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-148.shtml'}, {'name': 'GLSA-200405-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-15.xml'}, {'name': 'MDKSA-2004:049', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:049'}, {'name': '10385', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10385'}, {'name': 'DSA-506', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-506'}, {'name': 'FEDORA-2004-1552', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=1552'}, {'name': 'neon-library-nerfc1036parse-bo(16192)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16192'}, {'name': 'DSA-507', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-507'}, {'name': 'CLA-2004:841', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000841'}, {'name': '20040519 Advisory 06/2004: libneon date parsing vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108498433632333&w=2'}, {'name': 'RHSA-2004:191', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-191.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0399
Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.
Affected Products: n/a
References: [{'name': 'DSA-502', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-502'}, {'name': 'DSA-501', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-501'}, {'name': '20040506 Buffer overflows in exim, yet still exim much better than windows', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021015.html'}, {'name': '11558', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11558'}, {'name': 'exim-requireverify-bo(16079)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16079'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guninski.com/exim1.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0400
Stack-based buffer overflow in Exim 4 before 4.33, when the headers_check_syntax option is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code during the header check.
Affected Products: n/a
References: [{'name': 'DSA-502', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-502'}, {'name': 'DSA-501', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-501'}, {'name': '20040506 Buffer overflows in exim, yet still exim much better than windows', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021015.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guninski.com/exim1.html'}, {'name': 'exim-headerschecksyntax-bo(16077)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16077'}]
CVE State: PUBLISHED
Explain CVE-2004-0401
Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions.
Affected Products: n/a
References: [{'name': '15126', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15126'}, {'name': '1010159', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010159'}, {'name': 'libtasn1-der-parsing(16157)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16157'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.backports.org/changelog.html'}, {'name': '10360', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10360'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://packages.debian.org/changelogs/pool/main/libt/libtasn1-2/libtasn1-2_0.2.13-1/changelog'}]
CVE State: PUBLISHED
Explain CVE-2004-0402
Buffer overflow in xpcd-svga in xpcd before 2.08, and possibly other versions, may allow local users to execute arbitrary code.
Affected Products: n/a
References: [{'name': 'xpcd-svga-pcdopen-bo(16236)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16236'}, {'name': 'DSA-508', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-508'}, {'name': '10403', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10403'}, {'name': 'MDKSA-2004:053', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:053'}]
CVE State: PUBLISHED
Explain CVE-2004-0403
Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field.
Affected Products: n/a
References: [{'name': 'MDKSA-2004:069', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:069'}, {'name': 'oval:org.mitre.oval:def:984', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A984'}, {'name': '1009937', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009937'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vuxml.org/freebsd/ccd698df-8e20-11d8-90d1-0020ed76ef5a.html'}, {'name': '20040506-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040506-01-U.asc'}, {'name': 'racoon-isakmp-dos(15893)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15893'}, {'name': 'oval:org.mitre.oval:def:11220', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11220'}, {'name': 'APPLE-SA-2004-05-03', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://marc.info/?l=bugtraq&m=108369640424244&w=2'}, {'name': '11877', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11877'}, {'name': 'SCOSA-2005.10', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt'}, {'name': '10172', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10172'}, {'name': '11410', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11410'}, {'name': 'GLSA-200404-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200404-17.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=232288'}, {'name': '5491', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5491'}, {'name': 'RHSA-2004:165', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-165.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kame.net/dev/cvsweb2.cgi/kame/kame/kame/racoon/isakmp.c.diff?r1=1.180&r2=1.181'}]
CVE State: PUBLISHED
Explain CVE-2004-0404
logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp.
Affected Products: n/a
References: [{'name': 'MDKSA-2004:155', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:155'}, {'name': '11399', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11399'}, {'name': 'logcheck-directory-symlink(15888)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15888'}, {'name': 'DSA-488', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-488'}, {'name': '10162', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10162'}]
CVE State: PUBLISHED
Explain CVE-2004-0405
CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:1060', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1060'}, {'name': 'cvs-dotdot-directory-traversal(15891)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15891'}, {'name': 'DSA-486', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-486'}, {'name': 'SSA:2004-108-02', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.400181'}, {'name': '20040404-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc'}, {'name': 'FreeBSD-SA-04:07', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:07.cvs.asc'}, {'name': 'GLSA-200404-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200404-13.xml'}, {'name': 'oval:org.mitre.oval:def:10818', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10818'}, {'name': 'FEDORA-2004-1620', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=108636445031613&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0407
The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish.
Affected Products: n/a
References: [{'name': '10158', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10158'}, {'name': '1009825', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009825'}, {'name': '11392', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11392'}, {'name': 'coldfusion-upload-file-dos(15882)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15882'}, {'name': '5402', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5402'}, {'name': '20040416 [securityzone@macromedia.com: New Macromedia Security Zone Bulletin Posted]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108213782629001&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/devnet/security/security_zone/mpsb04-06.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0408
Buffer overflow in the child_service function in the ident2 ident daemon allows remote attackers to execute arbitrary code.
Affected Products: n/a
References: [{'name': 'ident2-childservice-bo(15938)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15938'}, {'name': '10192', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10192'}, {'name': 'DSA-494', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-494'}]
CVE State: PUBLISHED
Explain CVE-2004-0409
Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.
Affected Products: n/a
References: [{'name': 'RHSA-2004:177', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-177.html'}, {'name': 'DSA-493', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2004/dsa-493'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xchat.org/'}, {'name': 'RHSA-2004:585', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-585.html'}, {'name': 'GLSA-200404-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200404-15.xml'}, {'name': 'FLSA:123013', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_123013'}, {'name': 'oval:org.mitre.oval:def:11312', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11312'}, {'name': '[xchat-announce] 20040405 xchat 2.0.x Socks5 Vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail.nl.linux.org/xchat-announce/2004-04/msg00000.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0411
The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which allows remote attackers to manipulate the options that are passed to the associated programs, possibly to read arbitrary files or execute arbitrary code.
Affected Products: n/a
References: [{'name': 'RHSA-2004:222', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-222.html'}, {'name': 'SuSE-SA:2003:014', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_14_kdelibs.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20040517-1.txt'}, {'name': 'kde-url-handler-gain-access(16163)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16163'}, {'name': 'FEDORA-2004-121', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/advisories/6717'}, {'name': '20040513 Opera Telnet URI Handler Vulnerability also applies to other browsers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/363225'}, {'name': 'DSA-518', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-518'}, {'name': 'FEDORA-2004-122', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/advisories/6743'}, {'name': '6107', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6107'}, {'name': '20040517 KDE Security Advisory: URI Handler Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108481412427344&w=2'}, {'name': '11602', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11602'}, {'name': 'CLA-2004:843', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000843'}, {'name': 'SSA:2004-238', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.362635'}, {'name': 'GLSA-200405-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-11.xml'}, {'name': 'oval:org.mitre.oval:def:954', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A954'}, {'name': '10358', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10358'}, {'name': 'O-146', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-146.shtml'}]
CVE State: PUBLISHED
Explain CVE-2004-0412
Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server.
Affected Products: n/a
References: [{'name': '10412', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10412'}, {'name': 'GLSA-200406-04', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200406-04.xml'}, {'name': '11701', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11701'}, {'name': 'mailman-obtain-password(16256)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16256'}, {'name': 'MDKSA-2004:051', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:051'}, {'name': 'FEDORA-2004-1734', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=109034869927955&w=2'}, {'name': 'CLA-2004:842', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=123559'}, {'name': '[Mailman-Announce] 20040515 RELEASED Mailman 2.1.5', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail.python.org/pipermail/mailman-announce/2004-May/000072.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0413
libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL strings, which allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via an integer overflow that leads to a heap-based buffer overflow.
Affected Products: n/a
References: [{'name': '10519', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10519'}, {'name': 'FLSA:1748', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=1748'}, {'name': 'SuSE-SA:2004:018', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_18_subversion.html'}, {'name': 'FEDORA-2004-165', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/advisories/6847'}, {'name': 'GLSA-200406-07', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200406-07.xml'}, {'name': 'subversion-svn-bo(16396)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16396'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://subversion.tigris.org/security/CAN-2004-0413-advisory.txt'}, {'name': '20041012 [FMADV] Subversion <= 1.04 Heap Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/365836'}]
CVE State: PUBLISHED
Explain CVE-2004-0414
CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:10575', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10575'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/092004.html'}, {'name': '20040605-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc'}, {'name': 'DSA-517', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-517'}, {'name': 'oval:org.mitre.oval:def:993', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A993'}, {'name': '20040611 [OpenPKG-SA-2004.027] OpenPKG Security Advisory (cvs)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108716553923643&w=2'}, {'name': 'RHSA-2004:233', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-233.html'}, {'name': 'MDKSA-2004:058', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:058'}, {'name': 'GLSA-200406-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200406-06.xml'}, {'name': '20040604-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc'}, {'name': '20040609 Advisory 09/2004: More CVS remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0415
Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portions of kernel memory.
Affected Products: n/a
References: [{'name': 'RHSA-2004:413', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-413.html'}, {'name': 'RHSA-2004:418', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-418.html'}, {'name': 'GLSA-200408-24', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml'}, {'name': 'oval:org.mitre.oval:def:9965', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9965'}, {'name': 'CLA-2004:879', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000879'}, {'name': 'linux-pointer-info-disclosure(16877)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16877'}, {'name': 'MDKSA-2004:087', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:087'}, {'name': '20040804-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc'}]
CVE State: PUBLISHED
Explain CVE-2004-0416
Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.
Affected Products: n/a
References: [{'name': 'DSA-519', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-519'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/092004.html'}, {'name': '20040605-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc'}, {'name': '20040611 [OpenPKG-SA-2004.027] OpenPKG Security Advisory (cvs)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108716553923643&w=2'}, {'name': 'oval:org.mitre.oval:def:10070', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10070'}, {'name': 'RHSA-2004:233', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-233.html'}, {'name': 'MDKSA-2004:058', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:058'}, {'name': 'GLSA-200406-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200406-06.xml'}, {'name': '20040604-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc'}, {'name': 'oval:org.mitre.oval:def:994', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A994'}, {'name': '20040609 Advisory 09/2004: More CVS remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0417
Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:11145', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11145'}, {'name': 'DSA-519', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-519'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/092004.html'}, {'name': '20040605-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc'}, {'name': '20040611 [OpenPKG-SA-2004.027] OpenPKG Security Advisory (cvs)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108716553923643&w=2'}, {'name': 'RHSA-2004:233', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-233.html'}, {'name': 'MDKSA-2004:058', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:058'}, {'name': 'GLSA-200406-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200406-06.xml'}, {'name': 'oval:org.mitre.oval:def:1001', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1001'}, {'name': '20040609 Advisory 09/2004: More CVS remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0418
serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data.
Affected Products: n/a
References: [{'name': 'DSA-519', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-519'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/092004.html'}, {'name': 'oval:org.mitre.oval:def:11242', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11242'}, {'name': '20040605-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc'}, {'name': 'oval:org.mitre.oval:def:1003', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1003'}, {'name': '20040611 [OpenPKG-SA-2004.027] OpenPKG Security Advisory (cvs)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108716553923643&w=2'}, {'name': 'RHSA-2004:233', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-233.html'}, {'name': 'MDKSA-2004:058', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:058'}, {'name': 'GLSA-200406-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200406-06.xml'}, {'name': '20040604-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc'}, {'name': '20040609 Advisory 09/2004: More CVS remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0419
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.
Affected Products: n/a
References: [{'name': '12019', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12019'}, {'name': 'xdm-socket-gain-access(16264)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16264'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.xfree86.org/show_bug.cgi?id=1376'}, {'name': 'MDKSA-2004:073', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073'}, {'name': 'oval:org.mitre.oval:def:10161', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10161'}, {'name': 'GLSA-200407-05', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200407-05.xml'}, {'name': 'P-001', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-001.shtml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900'}, {'name': '10423', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10423'}, {'name': '1010306', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010306'}, {'name': '20040526 008: SECURITY FIX: May 26, 2004', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata.html#xdm'}, {'name': 'RHSA-2004:478', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-478.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0420
The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.
Affected Products: n/a
References: [{'name': 'ie-clsid-file-extension-spoofing(14964)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14964'}, {'name': '9510', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9510'}, {'name': 'TA04-196A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-196A.html'}, {'name': '10736', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10736/'}, {'name': 'oval:org.mitre.oval:def:2894', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2894'}, {'name': 'oval:org.mitre.oval:def:3386', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3386'}, {'name': 'oval:org.mitre.oval:def:3604', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3604'}, {'name': 'oval:org.mitre.oval:def:2245', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2245'}, {'name': '20040127 GOOROO CROSSING: File Spoofing Internet Explorer 6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/351379'}, {'name': 'oval:org.mitre.oval:def:3533', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3533'}, {'name': 'VU#106324', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/106324'}, {'name': '20040127 RE: GOOROO CROSSING: File Spoofing Internet Explorer 6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.security-express.com/archives/bugtraq/2004-01/0300.html'}, {'name': 'oval:org.mitre.oval:def:2381', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2381'}, {'name': 'MS04-024', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-024'}]
CVE State: PUBLISHED
Explain CVE-2004-0421
The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.
Affected Products: n/a
References: [{'name': 'FEDORA-2004-106', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=fedora-announce-list&m=108451353608968&w=2'}, {'name': '20040429 [OpenPKG-SA-2004.017] OpenPKG Security Advisory (png)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108334922320309&w=2'}, {'name': 'oval:org.mitre.oval:def:971', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A971'}, {'name': 'DSA-498', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-498'}, {'name': 'oval:org.mitre.oval:def:11710', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11710'}, {'name': 'MDKSA-2004:040', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:040'}, {'name': '22958', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22958'}, {'name': 'libpng-png-dos(16022)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16022'}, {'name': 'APPLE-SA-2004-09-09', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00056.html'}, {'name': '10244', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10244'}, {'name': 'FEDORA-2004-105', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=fedora-announce-list&m=108451350029261&w=2'}, {'name': 'MDKSA-2006:213', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:213'}, {'name': 'RHSA-2004:180', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-180.html'}, {'name': 'MDKSA-2006:212', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:212'}, {'name': '2004-0025', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://marc.info/?l=bugtraq&m=108335030208523&w=2'}, {'name': 'RHSA-2004:181', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-181.html'}, {'name': '22957', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22957'}]
CVE State: PUBLISHED
Explain CVE-2004-0422
flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack.
Affected Products: n/a
References: [{'name': 'RHSA-2004:344', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-344.html'}, {'name': 'DSA-500', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-500'}, {'name': 'flim-insecure-temporary-file(16027)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16027'}]
CVE State: PUBLISHED
Explain CVE-2004-0423
The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file.
Affected Products: n/a
References: [{'name': '20040418 ssmtp insecure file creation', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108239608131119&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0424
Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.
Affected Products: n/a
References: [{'name': 'SSA:2004-119', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.659586'}, {'name': 'SuSE-SA:2004:010', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_10_kernel.html'}, {'name': 'oval:org.mitre.oval:def:939', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A939'}, {'name': 'oval:org.mitre.oval:def:11214', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11214'}, {'name': 'RHSA-2004:183', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-183.html'}, {'name': 'MDKSA-2004:037', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:037'}, {'name': 'linux-ipsetsockopt-integer-bo(15907)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15907'}, {'name': '20040504-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc'}, {'name': '10179', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10179'}, {'name': 'ESA-20040428-004', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.isec.pl/vulnerabilities/isec-0015-msfilter.txt'}, {'name': 'CLA-2004:852', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852'}, {'name': '20040420 Linux kernel setsockopt MCAST_MSFILTER integer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108253171301153&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0425
Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie.
Affected Products: n/a
References: [{'name': 'siteminder-affiliate-smprofile-bo(15950)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15950'}, {'name': 'A042204-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2004/a042204-1.txt'}, {'name': '10198', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10198'}]
CVE State: PUBLISHED
Explain CVE-2004-0428
Unknown vulnerability in CoreFoundation in Mac OS X 10.3.3 and Mac OS X 10.3.3 Server, related to "the handling of an environment variable," has unknown attack vectors and unknown impact.
Affected Products: n/a
References: [{'name': '1010045', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010045'}, {'name': 'ESB-2004.0314', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4070'}, {'name': 'macos-corefoundation-environment(16051)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16051'}, {'name': 'APPLE-SA-2004-05-03', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.virus.org/macsec-0405/msg00000.html'}, {'name': '10270', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10270'}, {'name': '11539', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11539'}]
CVE State: PUBLISHED
Explain CVE-2004-0429
Unknown vulnerability related to "the handling of large requests" in RAdmin for Apple Mac OS X 10.3.3 and Mac OS X 10.2.8 may allow attackers to have unknown impact via unknown attack vectors.
Affected Products: n/a
References: [{'name': '20040503 [product-security@apple.com: APPLE-SA-2004-05-03 Security Update 2004-05-03]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108369640424244&w=2'}, {'name': '1010045', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010045'}, {'name': 'ESB-2004.0314', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4070'}, {'name': 'macos-radmin-large-request(16053)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16053'}, {'name': 'APPLE-SA-2004-05-03', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/May/msg00000.html'}, {'name': '11539', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11539/'}, {'name': 'O-138', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-138.shtml'}]
CVE State: PUBLISHED
Explain CVE-2004-0430
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string that is longer than the associated length field.
Affected Products: n/a
References: [{'name': 'A050304-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2004/a050304-1.txt'}, {'name': 'applefileserver-afp-pathname-bo(16049)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16049'}, {'name': '1010039', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010039'}, {'name': 'VU#648406', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/648406'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/securitynews/5QP0115CUO.html'}, {'name': 'APPLE-SA-2004-05-03', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00049.html'}, {'name': '11539', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11539'}]
CVE State: PUBLISHED
Explain CVE-2004-0431
Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2004-04-30', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00048.html'}, {'name': '20040502 EEYE: Apple QuickTime (QuickTime.qts) Heap Overflow', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=108356485013237&w=2'}, {'name': 'quicktime-heap-bo(16026)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16026'}, {'name': 'VU#782958', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/782958'}, {'name': '20040502 EEYE: Apple QuickTime (QuickTime.qts) Heap Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108360110618389&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0432
ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions.
Affected Products: n/a
References: [{'name': '10252', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10252'}, {'name': 'proftpd-cidr-acl-bypass(16038)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16038'}, {'name': '20040430 [OpenPKG-SA-2004.018] OpenPKG Security Advisory (proftpd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108335051011341&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.proftpd.org/show_bug.cgi?id=2267'}, {'name': '2004-0025', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://marc.info/?l=bugtraq&m=108335030208523&w=2'}, {'name': '11527', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11527'}, {'name': 'MDKSA-2004:041', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:041'}]
CVE State: PUBLISHED