Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-0870 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:31:47.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection." Additional Analyst Notes: - CVE Program Container: References: - http://securityfocus.com/archive/1/375407 - http://securitytracker.com/id?1011330 - http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt - https://exchange.xforce.ibmclo
/securitytracker.com/id?1011330 - http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/17417
CVE ID: CVE-2004-0871 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:31:47.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection." Additional Analyst Notes: - CVE Program Container: References: - http://securityfocus.com/archive/1/375407 - http://securitytracker.com/id?1011331 - http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt - https://exchange.xforce.ibmcloud.com
itytracker.com/id?1011331 - http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/17417
CVE ID: CVE-2004-0872 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:31:47.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1011329 - http://securityfocus.com/archive/1/375407 - http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt - https://exchange.xforce.ibmcloud.com/v
us.com/archive/1/375407 - http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/17417
CVE ID: CVE-2004-0873 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:47.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that references the program. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2004/Sep/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17420
CVE ID: CVE-2004-0874 State: REJECTED Published: 2004-12-05T05:00:00 Last Updated: 2005-02-06T10:00:00 Description: No description available.
CVE ID: CVE-2004-0875 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:47.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002 and earlier allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to the wiki module. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.phpgroupware.org/changelog - http://www.gentoo.org/security/en/glsa/glsa-200409-22.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17289
CVE ID: CVE-2004-0880 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:47.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109571883130372&w=2 - http://www.debian.org/security/2004/dsa-553 - http://www.qcc.ca/~charlesc/software/getmail-4/CHANGELOG - http://security.gentoo.org/glsa/glsa-200409-32.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17437
CVE ID: CVE-2004-0881 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:47.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109571883130372&w=2 - http://www.debian.org/security/2004/dsa-553 - http://www.qcc.ca/~charlesc/software/getmail-4/CHANGELOG - http://security.gentoo.org/glsa/glsa-200409-32.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17439
CVE ID: CVE-2004-0882 State: PUBLISHED Published: 2004-11-19T05:00:00 Last Updated: 2024-08-08T00:31:47.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012235 - http://marc.info/?l=bugtraq&m=110055646329581&w=2 - http://marc.info/?l=bugtraq&m=110330519803655&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18070 - http://www.kb.cert.org/vuls/id/457622 - http://d
3655&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18070 - http://www.kb.cert.org/vuls/id/457622 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000899 - http://secunia.com/advisories/13189 - http://security.e-matters.de/advisories/132004.html - http://marc.info/?l=bugtraq&m=110054671403755&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9969 - http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html - http://www.trustix.net/errata/2004/0058/ - http://www.osvdb.org/11782 - ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P - http://www.ciac.org/ciac/bulletins/p-038.shtml - http://www.novel
i.com/support/free/security/advisories/20041201-01-P - http://www.ciac.org/ciac/bulletins/p-038.shtml - http://www.novell.com/linux/security/advisories/2004_40_samba.html - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt
CVE ID: CVE-2004-0883 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:31:47.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information from kernel memory via a samba server (1) returning more data than requested to the smb_proc_read function, (2) returning a data offset from outside the samba packet to the smb_proc_readX function, (3) sending a certain TRANS2 fragmented packet to the smb_receive_trans2 function, (4) sending a samba packet with a certain header size to the smb_proc_re
nted packet to the smb_receive_trans2 function, (4) sending a samba packet with a certain header size to the smb_proc_readX_data function, or (5) sending a certain packet based offset for the data in a packet to the smb_receive_trans2 function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://www.securityfocus.com/bid/11695 - http://www.debian.org/security/2006/dsa-1082 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 - http://marc.info/?l=bugtraq&m=110072140811965&w=2 - https://bugzilla.fedora.us/show_bug.cgi?id=2336 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10330 - h
/show_bug.cgi?id=2336 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18136 - http://security.e-matters.de/advisories/142004.html - http://www.debian.org/security/2006/dsa-1070 - http://www.redhat.com/support/errata/RHSA-2004-537.html - http://secunia.com/advisories/20162 - http://www.kb.cert.org/vuls/id/726198 - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18135 - http://www.redhat.com/support/errata/RHSA-2004-505.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18134 - http://se
ww.redhat.com/support/errata/RHSA-2004-505.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18134 - http://secunia.com/advisories/20202 - http://www.redhat.com/support/errata/RHSA-2004-504.html - http://marc.info/?l=bugtraq&m=110082989725345&w=2 - http://secunia.com/advisories/13232/ - http://secunia.com/advisories/20338
CVE ID: CVE-2004-0884 State: PUBLISHED Published: 2004-10-21T04:00:00 Last Updated: 2024-08-08T00:31:47.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASL_PATH to point to malicious programs. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=134657 - http://marc.info/?l=bugtraq&m=110693126007214&w=2 - http://www.trustix.net/errata/2004/0053/ - http://www.ciac.org/ciac/bulletins/p-003.shtml
gtraq&m=110693126007214&w=2 - http://www.trustix.net/errata/2004/0053/ - http://www.ciac.org/ciac/bulletins/p-003.shtml - http://www.mandriva.com/security/advisories?name=MDKSA-2004:106 - http://www.debian.org/security/2004/dsa-568 - https://bugzilla.fedora.us/show_bug.cgi?id=2137 - http://www.debian.org/security/2004/dsa-563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17643 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11678 - http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html - http://www.securityfocus.com/bid/11347 - http://www.gentoo.org/security/en/glsa/glsa-200410-05.xml - http://rhn.redhat.com/errata/RHSA-2004
focus.com/bid/11347 - http://www.gentoo.org/security/en/glsa/glsa-200410-05.xml - http://rhn.redhat.com/errata/RHSA-2004-546.html
CVE ID: CVE-2004-0885 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:31:47.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11360 - http://www.redhat.com/support/errata/RHSA-2004-562.html - http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm - http://www.ubuntu.com/usn/usn-177-1 - http://m
562.html - http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm - http://www.ubuntu.com/usn/usn-177-1 - http://marc.info/?l=bugtraq&m=109786159119069&w=2 - http://www.redhat.com/support/errata/RHSA-2005-816.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10384 - http://secunia.com/advisories/19072 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX01123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17671 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://www.redhat.com/support/errata/RHSA-2004-600.html - http://lists.apple.com
om/support/errata/RHSA-2008-0261.html - http://www.redhat.com/support/errata/RHSA-2004-600.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1 - http://issues.apache.org/bugzilla/show_bug.cgi?id=31505 - http://www.vupen.com/english/advisories/2006/0789 - http://www.apacheweek.com/features/security-20 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1
985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E -
://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f
4890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2004-0886 State: PUBLISHED Published: 2004-10-26T04:00:00 Last Updated: 2024-08-08T00:31:47.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-577.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:109 - http://www.redhat.com/support/errata/RHSA-2005-021.html - http://www.ciac.org/ciac/bulletins/p-015.shtml - http://sunsolve.sun.com/search/document.do?ass
ata/RHSA-2005-021.html - http://www.ciac.org/ciac/bulletins/p-015.shtml - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9907 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1 - http://www.novell.com/linux/security/advisories/2004_38_libtiff.html - http://www.kb.cert.org/vuls/id/687568 - http://securitytracker.com/id?1011674 - http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000888 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:052 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17715 - http://www.trustix.org/errata/2004/0054/ -
MDKSA-2005:052 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17715 - http://www.trustix.org/errata/2004/0054/ - http://www.kde.org/info/security/advisory-20041209-2.txt - http://www.redhat.com/support/errata/RHSA-2005-354.html - http://secunia.com/advisories/12818 - http://www.securityfocus.com/bid/11406 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100116 - http://www.debian.org/security/2004/dsa-567 - http://marc.info/?l=bugtraq&m=109779465621929&w=2
CVE ID: CVE-2004-0887 State: PUBLISHED Published: 2004-10-26T04:00:00 Last Updated: 2024-08-08T00:31:47.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which allows local users to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11489 - http://secunia.com/advisories/19369 - http://www.debian.org/security/2006/dsa-1018 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17801 - http://www.novell.com/linux/security/advisories/2004_37_kernel.html
CVE ID: CVE-2004-0888 State: PUBLISHED Published: 2004-10-26T04:00:00 Last Updated: 2024-08-08T00:31:47.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-592.html - http://www.securityfocus.com/bid/11501 - http://www.redhat.com/support/errata/RHSA-2005-066.html - https://www.ubu
tml - http://www.securityfocus.com/bid/11501 - http://www.redhat.com/support/errata/RHSA-2005-066.html - https://www.ubuntu.com/usn/usn-9-1/ - http://www.mandriva.com/security/advisories?name=MDKSA-2004:113 - http://www.gentoo.org/security/en/glsa/glsa-200410-20.xml - http://www.debian.org/security/2004/dsa-581 - http://www.debian.org/security/2004/dsa-573 - https://bugzilla.fedora.us/show_bug.cgi?id=2353 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:116 - http://www.debian.org/security/2004/dsa-599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17818 - http://www.redhat.com/support/errata/RHSA-2005-354.html - http://www.redhat.com/support/errata/RHSA-2004-543.html -
8 - http://www.redhat.com/support/errata/RHSA-2005-354.html - http://www.redhat.com/support/errata/RHSA-2004-543.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9714 - http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000886 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:114 - http://www.gentoo.org/security/en/glsa/glsa-200410-30.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2004:115 - http://marc.info/?l=bugtraq&m=109880927526773&w=2 - http://marc.info/?l=bugtraq&m=110815379627883&w=2
CVE ID: CVE-2004-0889 State: PUBLISHED Published: 2004-10-26T04:00:00 Last Updated: 2024-08-08T00:31:48.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11501 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:113 - http://www.gentoo.org/security/en/glsa/glsa-200410-20.xml - http://www.gentoo.org/security/en/gl
s?name=MDKSA-2004:113 - http://www.gentoo.org/security/en/glsa/glsa-200410-20.xml - http://www.gentoo.org/security/en/glsa/glsa-200410-30.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17819 - http://marc.info/?l=bugtraq&m=109880927526773&w=2
CVE ID: CVE-2004-0890 State: REJECTED Published: 2004-12-08T05:00:00 Last Updated: 2005-02-06T10:00:00 Description: No description available.
CVE ID: CVE-2004-0891 State: PUBLISHED Published: 2004-10-21T04:00:00 Last Updated: 2024-08-08T00:31:47.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17787 - https://bugzilla.fedora.us/show_bug.cgi?id=2188 - http://www.gentoo.org/security/en/glsa/glsa-200410-23.x
lities/17787 - https://bugzilla.fedora.us/show_bug.cgi?id=2188 - http://www.gentoo.org/security/en/glsa/glsa-200410-23.xml - http://gaim.sourceforge.net/security/?id=9 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11790 - https://www.ubuntu.com/usn/usn-8-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/17790 - http://www.redhat.com/support/errata/RHSA-2004-604.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17786
CVE ID: CVE-2004-0892 State: PUBLISHED Published: 2004-11-16T05:00:00 Last Updated: 2024-08-08T00:31:47.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4264 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A485
org.mitre.oval%3Adef%3A4264 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4859 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17906 - http://www.securityfocus.com/bid/11605 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-039
CVE ID: CVE-2004-0893 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:31:48.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the lengths of messages sent to the LPC port, which allows local users to gain privileges, aka "Windows Kernel Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1561 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3
l%3Aorg.mitre.oval%3Adef%3A1561 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1581 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1886 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A450 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-044 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18339 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1321 - https://oval.cisecurity.org/repository/search/defini
g/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1321 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2008 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4458