Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2004-1107
dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Affected Products: n/a
References: [{'name': '13108', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13108/'}, {'name': '11616', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11616'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=69147'}, {'name': 'portage-dispatchconf-symlink(17986)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17986'}, {'name': 'GLSA-200411-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-13.xml'}]
CVE State: PUBLISHED
Explain CVE-2004-1108
qpkg in Gentoolkit 0.2.0_pre10 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary directory.
Affected Products: n/a
References: [{'name': '13108', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13108/'}, {'name': 'gentoolkit-symlink(17968)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17968'}, {'name': '11617', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11617'}, {'name': 'GLSA-200411-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-13.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=68846'}]
CVE State: PUBLISHED
Explain CVE-2004-1109
The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service (CPU consumption and system freeze from infinite loop) via a (1) TCP, (2) UDP, or (3) ICMP packet with a zero length IP Option field.
Affected Products: n/a
References: [{'name': 'kerio-pf-packet-dos(17992)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17992'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kerio.com/security_advisory.html'}, {'name': '11639', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11639'}, {'name': 'AD20041109', 'tags': ['third-party-advisory', 'x_refsource_EEYE'], 'url': 'http://www.eeye.com/html/research/advisories/AD20041109.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1110
The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink attack on the epson temporary file.
Affected Products: n/a
References: [{'name': 'GLSA-200411-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-17.xml'}, {'name': 'mtink-tmp-file-symlink(18011)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18011'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=70310'}, {'name': '11640', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11640'}]
CVE State: PUBLISHED
Explain CVE-2004-1111
Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:5632', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5632'}, {'name': 'TA04-316A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-316A.html'}, {'name': '20041110 Cisco Security Advisory: Cisco IOS DHCP Blocked Interface Denial-of-Service', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20041110-dhcp.shtml'}, {'name': 'VU#630104', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/630104'}, {'name': 'cisco-ios-dhcp-dos(18021)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18021'}, {'name': 'P-034', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-034.shtml'}]
CVE State: PUBLISHED
Explain CVE-2004-1112
The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks within the five minute timeout period.
Affected Products: n/a
References: [{'name': '11659', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11659'}, {'name': 'csa-buffer-protection-bypass(18037)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18037'}, {'name': '20041111 Crafted Timed Attack Evades Cisco Security Agent Protections', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20041111-csa.shtml'}, {'name': 'P-036', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-036.shtml'}]
CVE State: PUBLISHED
Explain CVE-2004-1113
SQL injection vulnerability in SQLgrey Postfix greylisting service before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) sender or (2) recipient e-mail addresses.
Affected Products: n/a
References: [{'name': '11633', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11633'}, {'name': '2004-0058', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0058/'}, {'name': 'sqlgrey-postfix-sql-injection(17998)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17998'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=281256'}, {'name': '13135', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13135/'}]
CVE State: PUBLISHED
Explain CVE-2004-1114
Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username, a different vulnerability than CVE-2004-1777.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.skype.com/products/skype/windows/changelog.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.skype.com/security/ssa-2004-02.html'}, {'name': '20041116 Skype callto:// BoF technical details', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028852.html'}, {'name': '20041116 Skype callto:// BoF technical details', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110062240706017&w=2'}, {'name': '20041115 Re: Skype callto:// BoF technical details', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110067029422696&w=2'}, {'name': '11682', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11682'}, {'name': '11786', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/11786'}, {'name': 'skype-callto-uri-bo(18063)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18063'}, {'name': '13191', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13191'}]
CVE State: PUBLISHED
Explain CVE-2004-1115
The init scripts in Search for Extraterrestrial Intelligence (SETI) project 3.08-r3 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs.
Affected Products: n/a
References: [{'name': 'GLSA-200411-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-26.xml'}, {'name': 'seti@home-gain-privileges(18149)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18149'}]
CVE State: PUBLISHED
Explain CVE-2004-1116
The init scripts in Great Internet Mersenne Prime Search (GIMPS) 23.9 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs.
Affected Products: n/a
References: [{'name': 'GLSA-200411-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-26.xml'}, {'name': 'seti@home-gain-privileges(18149)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18149'}]
CVE State: PUBLISHED
Explain CVE-2004-1117
The init scripts in ChessBrain 20407 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs.
Affected Products: n/a
References: [{'name': 'GLSA-200411-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-26.xml'}, {'name': 'seti@home-gain-privileges(18149)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18149'}]
CVE State: PUBLISHED
Explain CVE-2004-1118
Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename.
Affected Products: n/a
References: [{'name': '11721', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11721'}, {'name': '20041122 WeOnlyDo! COM Ftp DELUXE ActiveX Control Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029243.html'}, {'name': '20041122 WeOnlyDo! COM Ftp DELUXE ActiveX Control Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110114233323417&w=2'}, {'name': '20041122 CoffeeCup FTP Clients Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029244.html'}, {'name': 'wodftpdlx-long-filename-bo(18190)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18190'}]
CVE State: PUBLISHED
Explain CVE-2004-1119
Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file.
Affected Products: n/a
References: [{'name': 'winamp-incddadll-bo(18197)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18197'}, {'name': '13269', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13269/'}, {'name': '20041123 Winamp - Buffer Overflow In IN_CDDA.dll', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110123330404482&w=2'}, {'name': '20041124 Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110146036300803&w=2'}, {'name': '11730', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11730'}, {'name': '20041124 Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched]', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=110135574326217&w=2'}, {'name': 'VU#986504', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/986504'}, {'name': '20041123 Winamp - Buffer Overflow In IN_CDDA.dll', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=110126352412395&w=2'}, {'name': '20041126 Re: Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2004-11/0369.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-assessment.com/Papers/Winamp_IN_CDDA_Buffer_Overflow.pdf'}]
CVE State: PUBLISHED
Explain CVE-2004-1120
Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and earlier allow remote servers to execute arbitrary code via a long Location header.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=70090'}, {'name': 'GLSA-200411-31', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-31.xml'}, {'name': 'DSA-663', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-663'}, {'name': 'prozilla-bo(18210)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18210'}, {'name': '11734', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11734'}, {'name': '20041124 Prozilla Remote Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/382219'}]
CVE State: PUBLISHED
Explain CVE-2004-1121
Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags.
Affected Products: n/a
References: [{'name': 'VU#925430', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/925430'}, {'name': '11573', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11573'}, {'name': '13047', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13047/'}, {'name': 'ie-table-status-spoofing(17909)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17909'}, {'name': 'APPLE-SA-2004-12-02', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1122
Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows, aka the "Dialog Box Spoofing Vulnerability," a different vulnerability than CVE-2004-1314.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2004-10/'}, {'name': '12892', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12892'}, {'name': 'APPLE-SA-2004-12-02', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/multiple_browsers_dialog_box_spoofing_test/'}]
CVE State: PUBLISHED
Explain CVE-2004-1123
Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a DESCRIBE request with a location that contains a null byte.
Affected Products: n/a
References: [{'name': 'darwin-describe-dos(18357)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18357'}, {'name': '20041203 Apple Darwin Streaming Server DESCRIBE Null Byte Denial of Service Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=159&type=vulnerabilities'}]
CVE State: PUBLISHED
Explain CVE-2004-1124
Unknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape the chroot jail and conduct unauthorized activities.
Affected Products: n/a
References: [{'name': 'SCOSA-2005.2', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.2/SCOSA-2005.2.txt'}, {'name': '15339', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15339'}, {'name': '13915', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13915'}, {'name': 'SCOSA-2005.22', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.22/SCOSA-2005.22.txt'}, {'name': '12300', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12300'}, {'name': 'chroot-jail-security-bypass(18970)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18970'}]
CVE State: PUBLISHED
Explain CVE-2004-1127
Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code via a long RedirectAll command.
Affected Products: n/a
References: [{'name': '20041124 Buffer Overflow in Open Dc Hub 0.7.14', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110144606411674&w=2'}, {'name': '11747', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11747'}, {'name': 'open-hub-redirectall-bo(18254)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18254'}, {'name': 'GLSA-200411-37', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-37.xml'}, {'name': '20041124 Buffer Overflow in Open Dc Hub 0.7.14', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029383.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1128
Buffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary code via an attachment with a long filename.
Affected Products: n/a
References: [{'name': '20041124 [SIG^2 G-TEC] CMailServer WebMail v5.2 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110137313329955&w=2'}, {'name': '11742', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11742'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/cmailserver52.html'}, {'name': 'cmailserver-cmailcomdll-bo(18276)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18276'}]
CVE State: PUBLISHED
Explain CVE-2004-1129
SQL injection vulnerability in (1) fdelmail.asp, (2) addressc.asp, and possibly (3) postmail.asp and (4) fmvmail.asp in CMailServer 5.2 allow remote attackers to inject arbitrary SQL commands and delete mail metadata or e-mail addresses of contacts via the indexOfMail parameter.
Affected Products: n/a
References: [{'name': '20041124 [SIG^2 G-TEC] CMailServer WebMail v5.2 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110137313329955&w=2'}, {'name': '11742', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11742'}, {'name': 'cmailserver-fdelmail-addressc-sql-injection(18281)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18281'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/cmailserver52.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1130
Cross-site scripting (XSS) vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute arbitrary web script or HTML via personal information fields, such as (1) username, (2) name, or (3) comments.
Affected Products: n/a
References: [{'name': '20041124 [SIG^2 G-TEC] CMailServer WebMail v5.2 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110137313329955&w=2'}, {'name': '11742', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11742'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/cmailserver52.html'}, {'name': 'cmailserver-adminasp-xss(18280)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18280'}]
CVE State: PUBLISHED
Explain CVE-2004-1131
Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitrary code via long command line arguments.
Affected Products: n/a
References: [{'name': 'SCOSA-2005.13', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.13/SCOSA-2005.13.txt'}, {'name': '12474', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12474'}, {'name': 'openserver-enable-bo(19243)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19243'}]
CVE State: PUBLISHED
Explain CVE-2004-1133
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft W3Who ISAPI (w3who.dll) allow remote attackers to inject arbitrary HTML and web script via (1) HTTP headers such as "Connection" or (2) invalid parameters whose values are echoed in the resulting error message.
Affected Products: n/a
References: [{'name': '20041206 Multiple vulnerabilities in w3who ISAPI DLL', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=110234486823233&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.exaprobe.com/labs/advisories/esa-2004-1206.html'}, {'name': 'w3who-http-error-xss(18375)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18375'}]
CVE State: PUBLISHED
Explain CVE-2004-1134
Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long query string.
Affected Products: n/a
References: [{'name': '20041206 Multiple vulnerabilities in w3who ISAPI DLL', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=110234486823233&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.exaprobe.com/labs/advisories/esa-2004-1206.html'}, {'name': 'w3who-bo(18377)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18377'}]
CVE State: PUBLISHED
Explain CVE-2004-1135
Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1) SITE, (2) XMKD, (3) MKD, and (4) RNFR commands.
Affected Products: n/a
References: [{'name': 'wsftp-ftp-commands-bo(18296)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18296'}, {'name': '20041129 Multiple buffer overlows in WS_FTP Server Version 5.03, 2004.10.14.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110177654524819&w=2'}, {'name': '20041129 Multiple buffer overlows in WS_FTP Server Version 5.03, 2004.10.14.', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029600.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/exploits/6D00L2KBPG.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1136
Buffer overflow in CuteFTP Professional 6.0, and possibly other versions, allows remote FTP servers to cause a denial of service (application crash) via large replies to FTP commands.
Affected Products: n/a
References: [{'name': 'cuteftp-reply-bo(18309)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18309'}, {'name': '20041129 CuteFTP 6.0 Professional Remote Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110182983622642&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1137
Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via (1) the ip_mc_source function, which decrements a counter to -1, or (2) the igmp_marksources function, which does not properly validate IGMP message parameters and performs an out-of-bounds read.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:11144', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11144'}, {'name': 'MDKSA-2005:022', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:022'}, {'name': '20041214 [USN-38-1] Linux kernel vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110306397320336&w=2'}, {'name': 'FLSA:2336', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2336'}, {'name': 'SUSE-SA:2004:044', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_44_kernel.html'}, {'name': 'RHSA-2005:092', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-092.html'}, {'name': 'CLA-2005:930', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930'}, {'tags': ['x_refsource_MISC'], 'url': 'http://isec.pl/vulnerabilities/isec-0018-igmp.txt'}, {'name': 'linux-igmpmarksources-dos(18482)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18482'}, {'name': 'linux-ipmcsource-code-execution(18481)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18481'}]
CVE State: PUBLISHED
Explain CVE-2004-1138
VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.
Affected Products: n/a
References: [{'name': 'OpenPKG-SA-2004.052', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://marc.info/?l=bugtraq&m=110313588125609&w=2'}, {'name': 'GLSA-200412-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-10.xml'}, {'name': 'vim-modeline-gain-privileges(18503)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18503'}, {'name': 'FLSA:2343', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2343'}, {'name': 'RHSA-2005:036', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-036.html'}, {'name': 'RHSA-2005:010', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-010.html'}, {'name': 'oval:org.mitre.oval:def:9571', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9571'}]
CVE State: PUBLISHED
Explain CVE-2004-1139
Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (application crash).
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00016.html'}, {'name': 'CLA-2005:916', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916'}, {'name': 'GLSA-200412-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-15.xml'}, {'name': '13468', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13468/'}, {'name': 'MDKSA-2004:152', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:152'}, {'name': 'RHSA-2005:037', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-037.html'}, {'name': '11943', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11943'}, {'name': 'ethereal-dicom-dos(18484)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18484'}, {'name': 'oval:org.mitre.oval:def:11319', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11319'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'P-061', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-061.shtml'}]
CVE State: PUBLISHED
Explain CVE-2004-1140
Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang) and possibly fill available disk space via an invalid RTP timestamp.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:10484', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10484'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00016.html'}, {'name': 'CLA-2005:916', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916'}, {'name': 'GLSA-200412-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-15.xml'}, {'name': '13468', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13468/'}, {'name': 'MDKSA-2004:152', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:152'}, {'name': 'RHSA-2005:037', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-037.html'}, {'name': '11943', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11943'}, {'name': 'Ethereal-rtp-dos(18485)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18485'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'P-061', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-061.shtml'}]
CVE State: PUBLISHED
Explain CVE-2004-1141
The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (application crash) via a certain packet that causes the dissector to access previously-freed memory.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00016.html'}, {'name': 'ethereal-http-dissector-dos(18487)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18487'}, {'name': 'CLA-2005:916', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916'}, {'name': 'GLSA-200412-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-15.xml'}, {'name': '13468', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13468/'}, {'name': 'MDKSA-2004:152', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:152'}, {'name': 'RHSA-2005:037', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-037.html'}, {'name': '11943', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11943'}, {'name': 'oval:org.mitre.oval:def:9473', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9473'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'P-061', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-061.shtml'}]
CVE State: PUBLISHED
Explain CVE-2004-1142
Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00016.html'}, {'name': 'CLA-2005:916', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916'}, {'name': 'GLSA-200412-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-15.xml'}, {'name': '13468', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13468/'}, {'name': 'MDKSA-2004:152', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:152'}, {'name': 'RHSA-2005:037', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-037.html'}, {'name': 'DSA-613', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-613'}, {'name': '11943', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11943'}, {'name': 'oval:org.mitre.oval:def:11278', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11278'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'P-061', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-061.shtml'}, {'name': 'ethereal-smb-dos(18488)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18488'}]
CVE State: PUBLISHED
Explain CVE-2004-1143
The password generation in mailman before 2.1.5 generates only 5 million unique passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.
Affected Products: n/a
References: [{'name': '20050110 [USN-59-1] mailman vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110549296126351&w=2'}, {'name': 'mailman-weak-encryption(18857)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18857'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286796'}, {'name': 'SUSE-SA:2005:007', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_07_mailman.html'}, {'name': '13603', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13603/'}]
CVE State: PUBLISHED
Explain CVE-2004-1144
Unknown vulnerability in the 32bit emulation code in Linux 2.4 on AMD64 systems allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'RHSA-2004:689', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-689.html'}, {'name': 'oval:org.mitre.oval:def:10439', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10439'}, {'name': 'linux-32bit-emulation-gain-privileges(18686)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18686'}, {'name': 'SUSE-SA:2004:046', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://marc.info/?l=bugtraq&m=110376890429798&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1145
Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.
Affected Products: n/a
References: [{'name': 'RHSA-2005:065', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-065.html'}, {'name': '20041220 KDE Security Advisory: Konqueror Java Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110356286722875&w=2'}, {'name': 'konqueror-sandbox-restriction-bypass(18596)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18596'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.heise.de/security/dienste/browsercheck/tests/java.shtml'}, {'name': 'GLSA-200501-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-16.xml'}, {'name': '13586', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13586'}, {'name': 'MDKSA-2004:154', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:154'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20041220-1.txt'}, {'name': 'oval:org.mitre.oval:def:10173', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10173'}, {'name': 'VU#420222', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/420222'}]
CVE State: PUBLISHED
Explain CVE-2004-1146
Multiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for CVSTrac before 1.1.5 allow remote attackers to inject arbitrary HTML and web script.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.mikx.de/index.php?p=6'}, {'name': '20041223 Cross-Site Scripting - an industry-wide problem', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cvstrac.org/cvstrac/chngview?cn=320'}, {'name': 'cvstrac-main-login-xss(18726)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18726'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cvstrac.org/cvstrac/chngview?cn=321'}, {'name': 'OpenPKG-SA-2004.056', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://marc.info/?l=bugtraq&m=110332469631253&w=2'}, {'name': '12017', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12017'}]
CVE State: PUBLISHED
Explain CVE-2004-1147
phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary commands via shell metacharacters.
Affected Products: n/a
References: [{'name': 'phpmyadmin-command-execute(18441)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18441'}, {'name': '20041213 Multiple vulnerabilities in phpMyAdmin', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110295781828323&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.exaprobe.com/labs/advisories/esa-2004-1213.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1148
phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sql_localfile parameter.
Affected Products: n/a
References: [{'name': 'phpmyadmin-command-execute(18441)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18441'}, {'name': '20041213 Multiple vulnerabilities in phpMyAdmin', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110295781828323&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.exaprobe.com/labs/advisories/esa-2004-1213.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1149
Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files with insecure permissions (ACLs), which allows local users to gain privileges by replacing critical programs with malicious ones, as demonstrated using VetMsg.exe.
Affected Products: n/a
References: [{'name': 'etrust-antivirus-insecure-permissions(18502)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18502'}, {'name': '20041215 Computer Associates eTrust EZ Antivirus Insecure File Permission Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=164'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crm.my-etrust.com/login.asp?username=guest&target=DOCUMENT&openparameter'}]
CVE State: PUBLISHED
Explain CVE-2004-1150
Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long (1) device name or (2) sound track number, as demonstrated with a .m3u or .pls playlist file.
Affected Products: n/a
References: [{'name': 'winamp-incdda-bo(18840)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18840'}, {'name': '12381', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12381'}, {'name': '13781', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13781'}, {'name': '20050127 NSFOCUS SA2005-01 : Buffer Overflow in WinAMP in_cdda.dll CDA Device Name', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110684140108614&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nsfocus.com/english/homepage/research/0501.htm'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.winamp.com/player/version_history.php'}]
CVE State: PUBLISHED
Explain CVE-2004-1151
Multiple buffer overflows in the (1) sys32_ni_syscall and (2) sys32_vm86_warning functions in sys_ia32.c for Linux 2.6.x may allow local attackers to modify kernel memory and gain privileges.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://linux.bkbits.net:8080/linux-2.6/cset%401.2079'}, {'name': 'MDKSA-2005:022', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:022'}, {'name': '20041214 [USN-38-1] Linux kernel vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110306397320336&w=2'}, {'name': 'SUSE-SA:2004:044', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_44_kernel.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://linux.bkbits.net:8080/linux-2.6/gnupatch%4041ae6af1cR3mJYlW6D8EHxCKSxuJiQ'}, {'name': '[linux-kernel] 20041130 Buffer overrun in arch/x86_64/sys_ia32.c:sys32_ni_syscall()', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.ussg.iu.edu/hypermail/linux/kernel/0411.3/1467.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1152
Buffer overflow in the mailListIsPdf function in Adobe Acrobat Reader 5.09 for Unix allows remote attackers to execute arbitrary code via an e-mail message with a crafted PDF attachment.
Affected Products: n/a
References: [{'name': '20041214 Adobe Acrobat Reader 5.0.9 mailListIsPdf() Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=161&type=vulnerabilities&flashstatus=false'}, {'name': '13474', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13474'}, {'name': 'adobe-acrobat-maillistlspdf-bo(18477)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18477'}, {'name': 'SUSE-SR:2005:001', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_01_sr.html'}, {'name': 'VU#253024', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/253024'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/331153.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1153
Format string vulnerability in Adobe Acrobat Reader 6.0.0 through 6.0.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an .ETD document containing format string specifiers in (1) title or (2) baseurl fields.
Affected Products: n/a
References: [{'name': '20041214 Adobe Reader 6.0 .ETD File Format String Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=163&type=vulnerabilities'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/downloads/detail.jsp?ftpID=2679'}, {'name': 'oval:org.mitre.oval:def:2919', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2919'}, {'name': 'adobe-acrobat-etd-format-string(18478)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18478'}]
CVE State: PUBLISHED