Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e.ibmcloud.com/vulnerabilities/14153 - http://marc.info/?l=bugtraq&m=107340897710308&w=2 - http://secunia.com/advisories/10566 - http://www.osvdb.org/3424
CVE ID: CVE-2004-0030 State: PUBLISHED Published: 2004-01-08T05:00:00 Last Updated: 2024-08-08T00:01:23.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9368 - http://secunia.com/advisories/10565 - http://www.securitytracker.com/id?1008632 - https://exchange.xforce.ibmcloud.com/vuln
p://secunia.com/advisories/10565 - http://www.securitytracker.com/id?1008632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14159 - http://marc.info/?l=bugtraq&m=107340840209453&w=2 - http://www.osvdb.org/3343
CVE ID: CVE-2004-0031 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:01:23.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request to editconfig.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10565 - http://marc.info/?l=bugtraq&m=107340840209453&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14161 - http://www.osvdb.org/3403
CVE ID: CVE-2004-0032 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:01:23.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in PHPGEDVIEW 2.61 allows remote attackers to inject arbitrary HTML and web script via the firstname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10565 - http://marc.info/?l=bugtraq&m=107340840209453&w=2 - http://www.securityfocus.com/bid/9369 - http://www.osvdb.org/3402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14160
CVE ID: CVE-2004-0033 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:01:23.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain sensitive information via an action parameter with a phpinfo command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10565 - http://marc.info/?l=bugtraq&m=107340840209453&w=2 - http://www.securityfocus.com/bid/9371 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14162 - http://www.osvdb.org/3404
CVE ID: CVE-2004-0034 State: PUBLISHED Published: 2004-01-08T05:00:00 Last Updated: 2024-08-08T00:01:23.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.4.5 and earlier allow remote attackers to inject arbitrary HTML or web script via (1) the phorum_check_xss function in common.php, (2) the EditError variable in profile.php, and (3) the Error variable in login.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14145 - http://www.osvdb.org/3434 - http://www.osvdb.org/3510 - http://www.securityfocus.com/bid/9361 - http://marc.info/?l=bugtraq&m=1
www.osvdb.org/3434 - http://www.osvdb.org/3510 - http://www.securityfocus.com/bid/9361 - http://marc.info/?l=bugtraq&m=107340481804110&w=2 - http://phorum.org/ - http://secunia.com/advisories/10567 - http://www.osvdb.org/3506 - http://www.securitytracker.com/id?1008633
CVE ID: CVE-2004-0035 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:01:23.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hide_email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107340481804110&w=2 - http://secunia.com/advisories/10567 - http://www.osvdb.org/3508 - http://www.securityfocus.com/bid/9363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14146
CVE ID: CVE-2004-0036 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:01:23.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14144 - http://www.securityfocus.com/bid/9360 - http://www.osvdb.org/3344 - http://www.vbulletin.com/forum/showthread.php?postid=588825 - http://marc.info/?l=bugtraq&m=107340358202123&w=2
CVE ID: CVE-2004-0037 State: PUBLISHED Published: 2004-01-08T05:00:00 Last Updated: 2024-08-08T00:01:23.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: FirstClass Desktop Client 7.1 allows remote attackers to execute arbitrary commands via hyperlinks in FirstClass RTF messages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10556 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14151 - http://www.osvdb.org/3442 - http://www.securityfocus.com/bid/9370 - http://marc.info/?l=bugtraq&m=107340950611167&w=2 - http://www.securitytracker.com/id?1008609
CVE ID: CVE-2004-0038 State: PUBLISHED Published: 2004-04-30T04:00:00 Last Updated: 2024-08-08T00:01:23.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5626 - http://www.securityfocus.com/bid/10200 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14166 - http://download.nai.com/products/patches/ePO/v2.x/Patch14.txt - http://xforce.iss.net/xforce/alerts/id/173
CVE ID: CVE-2004-0039 State: PUBLISHED Published: 2004-02-11T05:00:00 Last Updated: 2024-08-08T00:01:23.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3 allows remote attackers to execute arbitrary code via HTTP requests that cause format string specifiers to be used in an error message, as demonstrated using the scheme of a URI. Additional Analyst Notes: - CVE Program Container: References: - http://xforce.iss.net/xforce/alerts/id/162 - http://www.kb.cert.org/vuls/
Notes: - CVE Program Container: References: - http://xforce.iss.net/xforce/alerts/id/162 - http://www.kb.cert.org/vuls/id/790771 - http://marc.info/?l=bugtraq&m=107604682227031&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14149 - http://www.ciac.org/ciac/bulletins/o-072.shtml - http://www.checkpoint.com/techsupport/alerts/security_server.html - http://www.securityfocus.com/bid/9581 - http://www.us-cert.gov/cas/techalerts/TA04-036A.html
CVE ID: CVE-2004-0040 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:01:23.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows remote attackers to execute arbitrary code via an ISAKMP packet with a large Certificate Request packet. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107604682227031&w=2 - http://www.kb.cert.org/vuls/id/873334 - http://www.securityfocus.com/bid/9582 - http://www.osvdb.org/4432 - https://exchange.xforce.ibmcloud.com/vulnerabilities
http://www.securityfocus.com/bid/9582 - http://www.osvdb.org/4432 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14150 - http://www.ciac.org/ciac/bulletins/o-073.shtml - http://www.osvdb.org/3821 - http://xforce.iss.net/xforce/alerts/id/163
CVE ID: CVE-2004-0041 State: PUBLISHED Published: 2004-01-14T05:00:00 Last Updated: 2024-08-08T00:01:23.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_auth_shadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, which could allow remote authenticated users to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3454 - http://www.securitytracker.com/id?1008675 - http://www.securityfocus.com/bid/9404 - http://www.debian.org/security/2004/dsa-421 - http://secunia.com/advisories/10612
CVE ID: CVE-2004-0042 State: PUBLISHED Published: 2004-01-14T05:00:00 Last Updated: 2024-08-08T00:01:23.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote attackers to identify valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1008628
CVE ID: CVE-2004-0043 State: PUBLISHED Published: 2004-01-14T05:00:00 Last Updated: 2024-08-08T00:01:23.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename in the download feature. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107357996802255&w=2 - http://secunia.com/advisories/10573 - http://www.securitytracker.com/id?1008651 - http://www.securityfocus.com/bid/9383 - http://www.osvdb.org/3437 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-J
//www.securityfocus.com/bid/9383 - http://www.osvdb.org/3437 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-January/015334.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/14171
CVE ID: CVE-2004-0044 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:01:23.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Personal Assistant 1.4(1) and 1.4(2) disables password authentication when "Allow Only Cisco CallManager Users" is enabled and the Corporate Directory settings refer to the directory service being used by Cisco CallManager, which allows remote attackers to gain access with a valid username. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14172 - http://www.cisco.com/warp/public/707/cisco-sa-20040108-pa.shtml - http://www.osvdb.org/3430 - http://www.sec
ies/14172 - http://www.cisco.com/warp/public/707/cisco-sa-20040108-pa.shtml - http://www.osvdb.org/3430 - http://www.securityfocus.com/bid/9384
CVE ID: CVE-2004-0045 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:01:23.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2004-01/0064.html - http://www.kb.cert.org/vuls/id/759020 - http://www.securityfocus.com/bid/9382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14190 - http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.365791 - ht
lities/14190 - http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.365791 - http://secunia.com/advisories/10578 - http://archives.neohapsis.com/archives/bugtraq/2004-01/0063.html
CVE ID: CVE-2004-0046 State: PUBLISHED Published: 2004-01-14T05:00:00 Last Updated: 2024-08-08T00:01:23.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script or HTML via a GET request containing a terminating '"' (double quote) character. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107350313917867&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14164 - http://www.securityfocus.com/bid/9375 - http://secunia.com/advisories/10575 - http://www.osvdb.org/3440 - http://securitytracker.com/id?1008646
CVE ID: CVE-2004-0047 State: PUBLISHED Published: 2004-01-29T05:00:00 Last Updated: 2024-08-08T00:01:23.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple programs in trr19 1.0 do not properly drop privileges before executing a system command, which could allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14975 - http://secunia.com/advisories/10745 - http://www.securityfocus.com/bid/9520 - http://www.debian.org/security/2004/dsa-430 - http://www.osvdb.org/3747 - http://www.securitytracker.com/id?1008875 - http://secunia.com/advisories/10744/
CVE ID: CVE-2004-0049 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:01:23.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/357834 - http://seclists.org/lists/vulnwatch/2004/Jan-Mar/0057.html - http://www.securityfocus.com/bid/9421 - http://service.real.com/help/faq/security/security022604.html - http://service.real.com/help/faq/security/040112_dos/
CVE ID: CVE-2004-0050 State: PUBLISHED Published: 2004-05-06T04:00:00 Last Updated: 2024-08-08T00:01:23.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as (1) NUL, (2) CON, (3) AUX, (4) COM1, (5) COM2, and others. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16066 - http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0024.html - http://marc.info/?l=bugtraq&m=108377388114888&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020
ml - http://marc.info/?l=bugtraq&m=108377388114888&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020952.html
CVE ID: CVE-2004-0051 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:01:23.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported Content-Transfer-Encoding values such as (1) uuencode, (2) mac-binhex40, and (3) yenc, which may be interpreted differently by mail clients. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109517788100063&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17337 - http://www.uniras.gov.uk/vuls/2004/38
109517788100063&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17337 - http://www.uniras.gov.uk/vuls/2004/380375/mime.htm
CVE ID: CVE-2004-0052 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:01:23.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters, or use standard separators incorrectly, within MIME headers, fields, parameters, or values, which may be interpreted differently by mail clients. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17334 - http://marc.info/?l=bugtraq&m=109517669115891&w=2 - http://www.uniras.gov.uk/vuls/2004/
loud.com/vulnerabilities/17334 - http://marc.info/?l=bugtraq&m=109517669115891&w=2 - http://www.uniras.gov.uk/vuls/2004/380375/mime.htm
CVE ID: CVE-2004-0053 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:01:23.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fields that use RFC2047 encoding, which may be interpreted differently by mail clients. Additional Analyst Notes: - CVE Program Container: References: - http://www.uniras.gov.uk/vuls/2004/380375/mime.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/17331 - http://marc.info/?l=bugtraq&m=109520704408739&w=2
CVE ID: CVE-2004-0054 State: PUBLISHED Published: 2004-01-15T05:00:00 Last Updated: 2024-08-08T00:01:23.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20040113-h323.shtml - http://www.securityfocus.com/bid/9406 - http://www.kb.cert.org/vuls/id/749342 - http://www.uniras.gov.uk/vuls/2004/006489/h323.htm - http
tyfocus.com/bid/9406 - http://www.kb.cert.org/vuls/id/749342 - http://www.uniras.gov.uk/vuls/2004/006489/h323.htm - http://www.cert.org/advisories/CA-2004-01.html - http://www.securitytracker.com/id?1008685 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4884
CVE ID: CVE-2004-0055 State: PUBLISHED Published: 2004-01-15T05:00:00 Last Updated: 2024-08-08T00:01:23.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A850 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000832 - ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc - http://www.redhat.com/archive
nuncio=000832 - ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc - http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00006.html - http://secunia.com/advisories/10718 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt - http://www.redhat.com/support/errata/RHSA-2004-008.html - http://www.redhat.com/archives/fedora-legacy-list/2004-January/msg00726.html - http://www.securitytracker.com/id?1008735 - http://www.securityfocus.com/bid/7090 - http://secunia.com/advisories/11032/ - ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2004-008.0.txt - http://marc.info/?l=tcpdump-workers&m=107325073018070&w=2 - http://www.redhat.com/archives/fedora-
CSSA-2004-008.0.txt - http://marc.info/?l=tcpdump-workers&m=107325073018070&w=2 - http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00015.html - http://www.kb.cert.org/vuls/id/955526 - http://secunia.com/advisories/11022 - http://secunia.com/advisories/10636 - http://marc.info/?l=bugtraq&m=107577418225627&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9989 - http://secunia.com/advisories/12179/ - http://secunia.com/advisories/10644 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:008 - ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc - http://www.debian.org/security/2004/dsa-425 - http://secuni
sgi.com/support/free/security/advisories/20040103-01-U.asc - http://www.debian.org/security/2004/dsa-425 - http://secunia.com/advisories/10652 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A853 - http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html - http://secunia.com/advisories/10639 - http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00009.html - http://lwn.net/Alerts/66445/
CVE ID: CVE-2004-0056 State: PUBLISHED Published: 2004-01-15T05:00:00 Last Updated: 2024-08-08T00:01:23.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9406 - http://www.kb.cert.org/vuls/id/749342 - http://www.securityt
iner: References: - http://www.securityfocus.com/bid/9406 - http://www.kb.cert.org/vuls/id/749342 - http://www.securitytracker.com/id?1008687 - http://www.uniras.gov.uk/vuls/2004/006489/h323.htm - http://www.cert.org/advisories/CA-2004-01.html
CVE ID: CVE-2004-0057 State: PUBLISHED Published: 2004-01-15T05:00:00 Last Updated: 2024-08-08T00:01:23.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/174086 - ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc - http://www.redhat.com/archives/fedora-a
086 - ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc - http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00006.html - http://secunia.com/advisories/10718 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt - http://www.redhat.com/support/errata/RHSA-2004-008.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11197 - http://www.redhat.com/archives/fedora-legacy-list/2004-January/msg00726.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A854 - http://secunia.com/advisories/11032/ - http://secunia.com/advisories/10668 - ftp://ftp.sco.com/pub/securit
3Adef%3A854 - http://secunia.com/advisories/11032/ - http://secunia.com/advisories/10668 - ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2004-008.0.txt - http://marc.info/?l=tcpdump-workers&m=107325073018070&w=2 - http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00015.html - http://secunia.com/advisories/11022 - http://secunia.com/advisories/10636 - http://marc.info/?l=bugtraq&m=107577418225627&w=2 - http://www.securitytracker.com/id?1008716 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14837 - http://lwn.net/Alerts/66805/ - http://secunia.com/advisories/12179/ - http://secunia.com/advisories/10644 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:008 -