Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2004-0579
Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root.
Affected Products: n/a
References: [{'name': 'super-format-string(16458)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16458'}, {'name': 'DSA-522', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-522'}]
CVE State: PUBLISHED
Explain CVE-2004-0580
DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://linksys.custhelp.com/cgi-bin/linksys.cfg/php/enduser/std_adp.php?p_faqid=832&p_%20%5Ccreated=1086294093&p_sid=pU1X1idh&p_lva=&p_sp=cF9zcmNoPSZwX3NvcnRfYnk9JnBfZ3JpZHNvcnQ9%20%5CJnBfcm93X2NudD02NTQmcF9wYWdlPTE%2A&p_li='}, {'name': 'linksys-etherfast-bootp-dos(16142)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16142'}, {'name': '11606', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11606'}, {'name': '6325', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6325'}, {'name': '1010288', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/alerts/2004/May/1010288.html'}, {'name': '20040607 Linksys BEFSR41 DHCP vulnerability server leaks network data', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108662876129301&w=2'}, {'name': '10329', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10329'}]
CVE State: PUBLISHED
Explain CVE-2004-0581
ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp.
Affected Products: n/a
References: [{'name': '10516', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10516'}, {'name': 'ksymoops-symlink(16392)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16392'}, {'name': 'MDKSA-2004:060', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:060'}]
CVE State: PUBLISHED
Explain CVE-2004-0582
Unknown vulnerability in Webmin 1.140 allows remote attackers to bypass access control rules and gain read access to configuration information for a module.
Affected Products: n/a
References: [{'name': '10474', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10474'}, {'name': 'DSA-526', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-526'}, {'name': '20040611 [SNS Advisory No.74] Webmin Access Control Rule Bypass Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108697184602191&w=2'}, {'name': 'MDKSA-2004:074', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:074'}, {'name': 'CLA-2004:848', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000848'}, {'name': 'webmin-bypass-security(16333)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16333'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.webmin.com/changes-1.150.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/74_e.html'}, {'name': 'GLSA-200406-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200406-12.xml'}, {'name': '10522', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10522'}]
CVE State: PUBLISHED
Explain CVE-2004-0583
The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords.
Affected Products: n/a
References: [{'name': '10474', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10474'}, {'name': 'DSA-526', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-526'}, {'name': 'webmin-username-password-dos(16334)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16334'}, {'name': '10523', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10523'}, {'name': 'MDKSA-2004:074', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:074'}, {'name': '20040611 [SNS Advisory No.75] Webmin/Usermin Account Lockout Bypass Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108737059313829&w=2'}, {'name': 'GLSA-200406-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200406-15.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.webmin.com/changes-1.150.html'}, {'name': 'GLSA-200406-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200406-12.xml'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/75_e.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0584
Unknown vulnerability in Horde IMP 3.2.3 and earlier, before a "security fix," does not properly validate input, which allows remote attackers to execute arbitrary script as other users via script or HTML in an e-mail message, possibly triggering a cross-site scripting (XSS) vulnerability.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.horde.org/imp/3.2/'}, {'name': '10501', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10501'}, {'name': 'imp-content-type-xss(16357)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16357'}, {'name': 'GLSA-200406-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200406-11.xml'}, {'name': '11805', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11805'}]
CVE State: PUBLISHED
Explain CVE-2004-0586
acpRunner ActiveX 1.2.5.0 allows remote attackers to execute arbitrary code via the (1) DownLoadURL, (2) SaveFilePath, and (3) Download ActiveX methods.
Affected Products: n/a
References: [{'name': '20040616 IBM acpRunner Activex Dangerous Methods Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108745652205176&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-306.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-54588'}, {'name': 'ibm-acprunner-execute-code(16429)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16429'}]
CVE State: PUBLISHED
Explain CVE-2004-0587
Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial of service.
Affected Products: n/a
References: [{'name': '1010057', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010057'}, {'name': 'RHSA-2004:413', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-413.html'}, {'name': 'RHSA-2004:418', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-418.html'}, {'name': 'oval:org.mitre.oval:def:9398', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9398'}, {'name': 'SuSE-SA:2004:010', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_10_kernel.html'}, {'name': 'FEDORA-2004-186', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lwn.net/Articles/91155/'}, {'name': 'suse-hbaapinode-dos(16062)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16062'}, {'name': '10279', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10279'}, {'name': 'MDKSA-2004:066', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:066'}, {'name': '20040804-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc'}]
CVE State: PUBLISHED
Explain CVE-2004-0588
Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and script via e-mail messages.
Affected Products: n/a
References: [{'name': 'GLSA-200406-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200406-15.xml'}, {'name': '20040611 [SNS Advisory No.73] Usermin Cross-site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108781564518287&w=2'}, {'name': '10521', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10521'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/73_e.html'}, {'name': 'usermin-email-xss(16494)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16494'}]
CVE State: PUBLISHED
Explain CVE-2004-0589
Cisco IOS 11.1(x) through 11.3(x) and 12.0(x) through 12.2(x), when configured for BGP routing, allows remote attackers to cause a denial of service (device reload) via malformed BGP (1) OPEN or (2) UPDATE messages.
Affected Products: n/a
References: [{'name': 'VU#784540', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/784540'}, {'name': 'oval:org.mitre.oval:def:4948', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4948'}, {'name': '20040616 Cisco IOS Malformed BGP Packet Causes Reload', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040616-bgp.shtml'}, {'name': 'cisco-ios-bgp-packet-dos(16427)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16427'}]
CVE State: PUBLISHED
Explain CVE-2004-0590
FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS#7 certificates in which a self-signed certificate identifies an alternate Certificate Authority (CA) and spoofed issuer and subject.
Affected Products: n/a
References: [{'name': 'MDKSA-2004:070', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:070'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openswan.org/support/vuln/can-2004-0590/'}, {'name': 'GLSA-200406-20', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200406-20.xml'}, {'name': 'ipsec-verifyx509cert-auth-bypass(16515)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16515'}]
CVE State: PUBLISHED
Explain CVE-2004-0591
Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script or HRML via (1) e-mail headers or (2) a message with a "message/delivery-status" MIME Content-Type.
Affected Products: n/a
References: [{'name': 'GLSA-200408-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-02.xml'}, {'name': 'sqwebmail-print-header-xss(16467)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16467'}, {'name': '11918', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11918/'}, {'name': 'DSA-533', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-533'}, {'name': '20040621 XSS vulnerability in Sqwebmail 4.0.4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108786212220140&w=2'}, {'name': '10588', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10588'}]
CVE State: PUBLISHED
Explain CVE-2004-0592
The tcp_find_option function of the netfilter subsystem for IPv6 in the SUSE Linux 2.6.5 kernel with USAGI patches, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a large option length that produces a negative integer after a casting operation to the char type, a similar flaw to CVE-2004-0626.
Affected Products: n/a
References: [{'name': '20040703 Re: SUSE Security Announcement: kernel (SUSE-SA:2004:020)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023408.html'}, {'name': 'linux-kernel-tcpfindoption-dos(43137)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/43137'}, {'name': 'SUSE-SA:2004:020', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_20_kernel.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0593
Sygate Enforcer 3.5MR1 and earlier passes broadcast traffic before authentication, which could allow remote attackers to bypass filtering rules.
Affected Products: n/a
References: [{'name': 'sygate-enforcer-filter-bypass(16948)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16948'}, {'name': '10908', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10908'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.corsaire.com/advisories/c031120-003.txt'}, {'name': '20040810 Corsaire Security Advisory - Sygate Enforcer unauthenticated broadcast issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109215731626998&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0596
The Equalizer Load-balancer for serial network interfaces (eql.c) in Linux kernel 2.6.x up to 2.6.7 allows local users to cause a denial of service via a non-existent device name that triggers a null dereference.
Affected Products: n/a
References: [{'name': 'linux-eql-dos(16694)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16694'}, {'name': '10730', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10730'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://linux.bkbits.net:8080/linux-2.6/cset%4040d4aa72hPLWy-jMLr0eJAXMxHcNZg'}]
CVE State: PUBLISHED
Explain CVE-2004-0600
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
Affected Products: n/a
References: [{'name': '2004-0039', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0039/'}, {'name': 'samba-swat-base64-bo(16785)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16785'}, {'name': 'CLA-2004:851', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000851'}, {'name': 'RHSA-2004:259', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-259.html'}, {'name': '20040722 TSSA-2004-014 - samba', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109052891507263&w=2'}, {'name': 'CLA-2004:854', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000854'}, {'name': '20040722 [OpenPKG-SA-2004.033] OpenPKG Security Advisory (samba)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109051533021376&w=2'}, {'name': 'oval:org.mitre.oval:def:11445', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11445'}, {'name': 'SUSE-SA:2004:022', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_22_samba.html'}, {'name': '20040722 Security Release - Samba 3.0.5 and 2.2.10', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109051340810458&w=2'}, {'name': '20040722 SWAT PreAuthorization PoC', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109053195818351&w=2'}, {'name': 'MDKSA-2004:071', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071'}, {'name': 'GLSA-200407-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml'}, {'name': '20040722 Samba 3.x swat preauthentication buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109052647928375&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0601
distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which could allow remote attackers to bypass intended restrictions.
Affected Products: n/a
References: [{'name': 'distcc-ip-gain-privileges(17581)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17581'}, {'name': '12711', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12711/'}, {'name': '11319', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11319'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://distcc.samba.org/ftp/distcc/distcc-2.17.NEWS'}]
CVE State: PUBLISHED
Explain CVE-2004-0602
The binary compatibility mode for FreeBSD 4.x and 5.x does not properly handle certain Linux system calls, which could allow local users to access kernel memory to gain privileges or cause a system panic.
Affected Products: n/a
References: [{'name': '10643', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10643'}, {'name': 'freebsd-binary-information-disclosure(16558)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16558'}, {'name': 'FreeBSD-SA-04:13', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:13.linux.asc'}]
CVE State: PUBLISHED
Explain CVE-2004-0603
gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users to execute arbitrary commands, a different vulnerability than CVE-1999-1332.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=54890'}, {'name': 'gzip-gzexe-tmpfile(16506)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16506'}, {'name': 'GLSA-200406-18', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200406-18.xml'}, {'name': '10603', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10603'}]
CVE State: PUBLISHED
Explain CVE-2004-0604
The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service (crash), possibly via an empty search query, which triggers a NULL dereference.
Affected Products: n/a
References: [{'name': 'GLSA-200406-19', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200406-19.xml'}, {'name': '11941', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11941/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://developer.berlios.de/bugs/?func=detailbug&bug_id=1573&group_id=809'}, {'name': 'gift-fasttrack-daemon-dos(16508)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16508'}, {'name': '10604', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10604'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gift-fasttrack.berlios.de/'}]
CVE State: PUBLISHED
Explain CVE-2004-0605
Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote attackers to cause a denial of service by repeatedly making requests, which are slowly dequeued.
Affected Products: n/a
References: [{'name': 'ircd-parseclientqueued-dos(16457)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16457'}, {'name': '10572', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10572'}, {'name': '20040618 ircd-hybrid-7 / ircd-ratbox low-bandwidth DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108766803817406&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0606
Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the (1) CLIENTID or (2) HOSTNAME option of a DHCP request.
Affected Products: n/a
References: [{'name': 'dnsone-dhcp-report-xss(16456)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16456'}, {'name': '10573', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10573'}, {'name': '20040619 Script injection in DNSONE appliance', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108769996925349&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0607
The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.
Affected Products: n/a
References: [{'name': "20040615 Re: authentication bug in KAME's racoon", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108731967126033&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=245982'}, {'name': '7113', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7113'}, {'name': '11877', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11877'}, {'name': "20040614 authentication bug in KAME's racoon", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108726102304507&w=2'}, {'name': 'racoon-eaycheckx509cert-auth-bypass(16414)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16414'}, {'name': 'RHSA-2004:308', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-308.html'}, {'name': 'SCOSA-2005.10', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt'}, {'name': 'oval:org.mitre.oval:def:9163', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9163'}, {'name': '1010495', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010495'}, {'name': '11863', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11863'}, {'name': '10546', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10546'}, {'name': 'GLSA-200406-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200406-17.xml'}]
CVE State: PUBLISHED
Explain CVE-2004-0608
The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP 7710 and earlier, Unreal Tournament 451b and earlier, Unreal Tournament 2003 2225 and earlier, Unreal Tournament 2004 before 3236, Wheel of Time 333b and earlier, and X-com Enforcer, allows remote attackers to execute arbitrary code via a UDP packet containing a secure query with a long value, which overwrites memory.
Affected Products: n/a
References: [{'name': '10570', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10570'}, {'name': 'GLSA-200407-14', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200407-14.xml'}, {'name': '20040618 Code execution in the Unreal Engine through \\secure\\ packet', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108787105023304&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/unsecure-adv.txt'}, {'name': 'unreal-secure-query-command-execute(16451)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16451'}]
CVE State: PUBLISHED
Explain CVE-2004-0609
rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authenticated users to determine the existence of files in a directory outside the jail.
Affected Products: n/a
References: [{'name': '10574', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10574'}, {'name': '20040619 Security flaw in rssh', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108787373022844&w=2'}, {'name': 'rssh-jail-obtain-info(16470)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16470'}]
CVE State: PUBLISHED
Explain CVE-2004-0610
The Web administration interface in Microsoft MN-500 Wireless Router allows remote attackers to cause a denial of service (connection refusal) via a large number of open HTTP connections.
Affected Products: n/a
References: [{'name': '10585', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10585'}, {'name': '20040621 Microsoft MN-500 Wireless Router Web-Based Administration DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108796481501258&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.kurczaba.com/securityadvisories/0406213.htm'}, {'name': 'mn500-web-admin-dos(16448)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16448'}]
CVE State: PUBLISHED
Explain CVE-2004-0611
Web-Based Administration in Netgear FVS318 VPN Router allows remote attackers to cause a denial of service (no new connections) via a large number of open HTTP connections.
Affected Products: n/a
References: [{'name': '20040621 NETGEAR FVS318 Web-Based Administration DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108787199201059&w=2'}, {'name': '10585', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10585'}, {'name': 'netgear-fvs318-dos(16462)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16462'}]
CVE State: PUBLISHED
Explain CVE-2004-0612
The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL encrypted session, which could allow remote attackers to bypass the mobile code filtering.  NOTE: it has been disputed by the vendor that this behavior is required by the SSL specification.
Affected Products: n/a
References: [{'name': "20040621 ZoneAlarm Pro 'Mobile Code' Bypass Vulnerability", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108786444608208&w=2'}, {'name': 'zonealarm-mobile-code-bypass(16471)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16471'}, {'name': '20040625 Zone Labs response to "ZoneAlarm Pro \'Mobile Code\' Bypass Vulnerability"', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2004-06/0420.html'}, {'name': '10584', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10584'}]
CVE State: PUBLISHED
Explain CVE-2004-0613
osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a PHP file to the ticket attachments directory.
Affected Products: n/a
References: [{'name': '20040621 Multiple osTicket exploits!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108786779500957&w=2'}, {'name': 'osticket-view-attachments(16478)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16478'}, {'name': '10586', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10586'}, {'name': 'osticket-php-file-upload(16477)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16477'}]
CVE State: PUBLISHED
Explain CVE-2004-0614
osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote attackers to upload a file of any size.
Affected Products: n/a
References: [{'name': '20040621 Multiple osTicket exploits!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108786779500957&w=2'}, {'name': 'osticket-php-file-upload(16477)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16477'}]
CVE State: PUBLISHED
Explain CVE-2004-0615
Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request.
Affected Products: n/a
References: [{'name': '10587', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10587'}, {'name': '11919', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11919'}, {'name': '7211', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7211'}, {'name': '20040621 DLINK 614+, script injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108786257609932&w=2'}, {'name': 'dlink614-dhcp-xss(16468)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16468'}, {'name': '20040621 DLINK 704, script injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108797273127182&w=2'}, {'name': '20040701 DLINK 624, script injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2004-07/0014.html'}, {'name': '1010562', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010562'}]
CVE State: PUBLISHED
Explain CVE-2004-0616
The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obtain sensitive information such as the password, which is stored in plaintext.
Affected Products: n/a
References: [{'name': 'bt-voyager-password-plaintext(16472)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16472'}, {'name': '10589', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10589'}, {'name': '20040622 Wireless Modem (BT Voyager 2000 Wireless ADSL Router cleartext password)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0710.html'}, {'name': '20040622 Wireless Modem (BT Voyager 2000 Wireless ADSL Router cleartext password)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108794963119034&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0617
Cross-site scripting (XSS) vulnerability in ArbitroWeb 0.6 allows remote attackers to inject arbitrary script or HTML via the rawURL parameter.
Affected Products: n/a
References: [{'name': '10592', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10592'}, {'name': '20040622 ArbitroWeb v0.6 Javascript injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108794392303244&w=2'}, {'name': 'arbitroweb-rawurl-xss(16481)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16481'}]
CVE State: PUBLISHED
Explain CVE-2004-0618
FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via an execve system call with an unaligned memory address as an argument.
Affected Products: n/a
References: [{'name': '10596', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10596'}, {'name': 'freebsd-execve-dos(16499)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16499'}, {'name': '20040623 Security Advisory : FreeBSD local DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108816603102865&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0619
Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a negative add_dsa_buf_bytes variable, which leads to a buffer overflow.
Affected Products: n/a
References: [{'name': '20040623 Linux Broadcom 5820 Cryptonet Driver Integer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108802653409053&w=2'}, {'name': 'RHSA-2005:283', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-283.html'}, {'name': 'RHSA-2004:549', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-549.html'}, {'name': 'P-047', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-047.shtml'}, {'name': '10599', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10599'}, {'name': 'oval:org.mitre.oval:def:9773', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9773'}, {'name': '11936', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11936'}, {'name': 'bcm5820-adddsabufbytes-integer-bo(16459)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16459'}]
CVE State: PUBLISHED
Explain CVE-2004-0620
Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote attackers to inject arbitrary HTML or script as other users via the Edit-panel.
Affected Products: n/a
References: [{'name': 'vbulletin-newreply-newthread-xss(16502)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16502'}, {'name': '10602', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10602'}, {'name': '20040624 vBulletin HTML Injection Vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108809720026642&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0621
admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a list_user operation with the ulevel parameter set to 1 (administrator level), which lists all users and their passwords.
Affected Products: n/a
References: [{'name': 'zws-gain-admin-access(16507)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16507'}, {'name': '20040624 ZWS Newsletter & Mailing List Manager', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108811585025216&w=2'}, {'name': '10605', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10605'}]
CVE State: PUBLISHED
Explain CVE-2004-0622
Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindow.app), Keychain, or FileVault passwords, which could allow the root user or an attacker with physical access to obtain sensitive information by reading memory.
Affected Products: n/a
References: [{'name': '20040625 Mac OS X stores login/Keychain/FileVault passwords on disk', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108819559925981&w=2'}, {'name': '20080228 Loginwindow.app and Mac OS X', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/488930/100/100/threaded'}, {'name': 'macos-memory-view-passwords(16557)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16557'}, {'name': '20080229 Re: Loginwindow.app and Mac OS X', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/488948/100/100/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://citp.princeton.edu/pub/coldboot.pdf'}]
CVE State: PUBLISHED
Explain CVE-2004-0623
Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.
Affected Products: n/a
References: [{'name': '20040625 format string vulnerability in Gnats', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108820000823191&w=2'}, {'name': 'gnats-format-string(16517)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16517'}, {'name': '10609', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10609'}]
CVE State: PUBLISHED
Explain CVE-2004-0624
PHP remote file inclusion vulnerability in index.php for Artmedic links 5.0 (artmedic_links5) allows remote attackers to execute arbitrary PHP code by modifying the id parameter to reference a URL on a remote web server that contains the code.
Affected Products: n/a
References: [{'name': 'artmedic-url-file-disclosure(16518)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16518'}, {'name': '20040625 artmedic_links5 PHP Script (include path) vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108820257812904&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-0625
SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication and gain privileges via the login page.
Affected Products: n/a
References: [{'name': '20040627 ZH2004-14SA (security advisory):Sql Injection in Infinity WEB', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0893.html'}, {'name': '20040627 ZH2004-14SA (security advisory):Sql Injection in Infinity WEB', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108844087931959&w=2'}, {'name': 'infinity-web-sql-injection(16513)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16513'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.org/en/advisories/read/id=4892/'}, {'name': '10614', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10614'}]
CVE State: PUBLISHED
Explain CVE-2004-0626
The tcp_find_option function of the netfilter subsystem in Linux kernel 2.6, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a large option length that produces a negative integer after a casting operation to the char type.
Affected Products: n/a
References: [{'name': 'FEDORA-2004-202', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lwn.net/Articles/91964/'}, {'name': 'GLSA-200407-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200407-12.xml'}, {'name': '20040630 Remote DoS vulnerability in Linux kernel 2.6.x', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108861141304495&w=2'}, {'name': 'linux-tcpfindoption-dos(16554)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16554'}, {'name': 'CLA-2004:852', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852'}, {'name': 'SUSE-SA:2004:020', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_20_kernel.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0627
The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string.
Affected Products: n/a
References: [{'name': 'VU#184030', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/184030'}, {'name': '20040705 MySQL Authentication Bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108904917528205&w=2'}, {'name': '20040705 MySQL Authentication Bypass', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0628
Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long scramble string.
Affected Products: n/a
References: [{'name': '20040705 MySQL Authentication Bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108904917528205&w=2'}, {'name': '20040705 MySQL Authentication Bypass', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.html'}, {'name': 'VU#645326', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/645326'}, {'name': 'mysql-myrnd-bo(16612)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16612'}]
CVE State: PUBLISHED
Explain CVE-2004-0629
Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote attackers to execute arbitrary code via a URI for a PDF file with a null terminator (%00) followed by a long string.
Affected Products: n/a
References: [{'name': '20040813 Adobe Acrobat/Acrobat Reader ActiveX Control Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=126&type=vulnerabilities'}, {'name': '10947', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10947'}, {'name': 'acrobat-reader-activex-bo(16998)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16998'}, {'name': 'GLSA-200408-14', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-14.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/330527.html'}]
CVE State: PUBLISHED
Explain CVE-2004-0630
The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters ("`" or backtick) in the filename of the PDF file that is provided to the uudecode command.
Affected Products: n/a
References: [{'name': 'RHSA-2004:432', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-432.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/322914.html'}, {'name': '20040812 Adobe Acrobat Reader (Unix) Shell Metacharacter Code Execution Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=124&type=vulnerabilities'}, {'name': '10931', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10931'}, {'name': 'GLSA-200408-14', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200408-14.xml'}, {'name': 'acrobat-reader-execute-code(16973)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16973'}]
CVE State: PUBLISHED
Explain CVE-2004-0631
Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via a long filename for the PDF file that is provided to the uudecode command.
Affected Products: n/a
References: [{'name': 'adobe-acrobat-uudecode-bo(16972)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16972'}, {'name': '10932', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10932'}, {'name': 'RHSA-2004:432', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-432.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/322914.html'}, {'name': '20040812 Adobe Acrobat Reader (Unix) 5.0 Uudecode Filename Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=125&type=vulnerabilities'}, {'name': 'GLSA-200408-14', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200408-14.xml'}]
CVE State: PUBLISHED
Explain CVE-2004-0632
Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader, triggering a buffer overflow.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.adobe.com/support/techdocs/34222.htm'}, {'name': '20040712 Adobe Reader 6.0 Filename Handler Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=116&type=vulnerabilities'}, {'name': 'adobe-acrobat-null-bo(16667)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16667'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/330527.html'}]
CVE State: PUBLISHED