Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-1154 State: PUBLISHED Published: 2004-12-22T05:00:00 Last Updated: 2024-08-08T00:39:00.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.samba.org/samba/security/CAN-2004-1154.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101643-1 - https://oval.cisecurity.org/reposi
-2004-1154.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101643-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10236 - http://www.securityfocus.com/bid/11973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18519 - http://www.redhat.com/support/errata/RHSA-2005-020.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A642 - http://secunia.com/advisories/13453/ - http://www.debian.org/security/2005/dsa-701 - http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57730-1 - http://www.idefense.com/application/poi
g00000.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57730-1 - http://www.idefense.com/application/poi/display?id=165&type=vulnerabilities - http://www.novell.com/linux/security/advisories/2004_45_samba.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1459 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt - http://www.kb.cert.org/vuls/id/226184
CVE ID: CVE-2004-1155 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:00.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability. NOTE: later research shows that Internet Explorer 7 on Windows XP SP2 is also vulnerable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11855 - http://secunia.com/multiple_browser
tes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11855 - http://secunia.com/multiple_browsers_window_injection_vulnerability_test/ - http://secunia.com/advisories/22628 - http://www.securityfocus.com/archive/1/449917/100/0/threaded - http://secunia.com/advisories/13251/ - http://secunia.com/secunia_research/2004-13/advisory/
CVE ID: CVE-2004-1156 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:00.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/multiple_browsers_window_injection_vulnerability_test/ - http://secunia.com/secunia_research/2004-13/advisory/ - http://secunia.com
owsers_window_injection_vulnerability_test/ - http://secunia.com/secunia_research/2004-13/advisory/ - http://secunia.com/advisories/13129/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10117 - http://www.redhat.com/support/errata/RHSA-2005-176.html - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml - http://www.mozilla.org/security/announce/mfsa2005-13.html - http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100045
CVE ID: CVE-2004-1157 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:01.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 7.x up to 7.54, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/multiple_browsers_window_injection_vulnerability_test/ - http://secunia.com/advisories/13253/ - http://secunia.com/secunia_resea
_browsers_window_injection_vulnerability_test/ - http://secunia.com/advisories/13253/ - http://secunia.com/secunia_research/2004-13/advisory/ - http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml
CVE ID: CVE-2004-1158 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:00.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13486 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11056 -
a.com/advisories/13486 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11056 - http://secunia.com/advisories/13254 - http://secunia.com/multiple_browsers_window_injection_vulnerability_test/ - http://secunia.com/advisories/13560 - http://secunia.com/secunia_research/2004-13/advisory/ - http://www.kde.org/info/security/advisory-20041213-1.txt - http://www.novell.com/linux/security/advisories/2005_01_sr.html - http://www.redhat.com/support/errata/RHSA-2005-009.html - http://marc.info/?l=bugtraq&m=110296048613575&w=2 - http://secunia.com/advisories/13477 - http://www.securityfocus.com/bid/11853
CVE ID: CVE-2004-1159 State: REJECTED Published: 2004-12-10T05:00:00 Last Updated: 2004-12-22T10:00:00 Description: No description available.
CVE ID: CVE-2004-1160 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:01.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/multiple_browsers_window_injection_vulnerability_test/ - http://www.securityfocus.com/bid/11852 - http://secunia.com/secunia_rese
browsers_window_injection_vulnerability_test/ - http://www.securityfocus.com/bid/11852 - http://secunia.com/secunia_research/2004-13/advisory/ - http://secunia.com/advisories/13402/
CVE ID: CVE-2004-1161 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:00.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via (1) rdist -P, (2) rsync, or (3) scp -S. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200412-01.xml - http://www.securityfocus.com/bid/11792 - http://marc.info/?l=bugtraq&m=110581113814623&w=2 - http://marc.info/?l=bugtraq&m=110202047507273&w=2
CVE ID: CVE-2004-1162 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:00.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unison command in scponly before 4.0 does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via the (1) -rshcmd or (2) -sshcmd flags. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200412-01.xml - http://marc.info/?l=bugtraq&m=110581113814623&w=2 - http://marc.info/?l=bugtraq&m=110202047507273&w=2 - http://www.sublimation.org/scponly/#relnotes - https
113814623&w=2 - http://marc.info/?l=bugtraq&m=110202047507273&w=2 - http://www.sublimation.org/scponly/#relnotes - https://exchange.xforce.ibmcloud.com/vulnerabilities/18362 - http://www.securityfocus.com/bid/11791
CVE ID: CVE-2004-1163 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:00.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco CNS Network Registrar Central Configuration Management (CCM) server 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (CPU consumption) by ending a connection after sending a certain sequence of packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a008036786d.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/18327
CVE ID: CVE-2004-1164 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:00.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lock manager in Cisco CNS Network Registrar 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (process crash) via a certain "unexpected packet sequence." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18328 - http://www.cisco.com/en/US/products/products_security_advisory09186a008036786d.shtml - http://www.securityfocus.com/bid/11793
CVE ID: CVE-2004-1165 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:01.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-065.html - http://www.gentoo.org/security/en/glsa/glsa-200501-18.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval
org/security/en/glsa/glsa-200501-18.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18384 - http://www.debian.org/security/2005/dsa-631 - http://marc.info/?l=bugtraq&m=110245752232681&w=2 - http://www.redhat.com/support/errata/RHSA-2005-009.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:045
CVE ID: CVE-2004-1166 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:01.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command. Additional Analyst Notes: - CVE Program Container: References: - http://www.rapid7.com/advisories/R7-0032.jsp - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-0
/www.rapid7.com/advisories/R7-0032.jsp - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042 - http://www.securityfocus.com/archive/1/489500/100/0/threaded - http://marc.info/?l=bugtraq&m=110253463305359&w=2 - http://secunia.com/advisories/29346 - http://www.securityfocus.com/bid/11826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18384 - http://www.vupen.com/english/advisories/2006/3212 - http://www.securityfocus.com/bid/28208 - http://www.vupen.com/english/advisories/2008/0870 - http://www.osvdb.org/12299 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A462 - http://secunia.com/advisories/13404 - http://security
g/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A462 - http://secunia.com/advisories/13404 - http://securitytracker.com/id?1012444
CVE ID: CVE-2004-1167 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:00.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: mirrorselect before 0.89 creates temporary files in a world-writable location with predictable file names, which allows remote attackers to overwrite arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200412-05.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/18382 - http://secunia.com/advisories/13392/
CVE ID: CVE-2004-1168 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:00.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to execute arbitrary code via a long Overwrite header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18386 - http://marc.info/?l=bugtraq&m=110244542000340&w=2
CVE ID: CVE-2004-1169 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:01.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to cause a denial of service (application crash) via an HTTP GET request for a file that does not exist, followed by two carriage returns, which causes a NULL dereference. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110244542000340&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18387
CVE ID: CVE-2004-1170 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:01.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/283134 - http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1026.html - http://marc.info/?l=bugtraq&m=110598355226660&w=2 - http://www.novell.com/linux/security/advisories/2004_34_xfree86_libs_xshared.html - http://www.securiteam.com/unixfocus/5MP0N2KDPA.html - http://www.securityfocus.com/archive/1/419765/100/0/threaded - ht
http://www.securiteam.com/unixfocus/5MP0N2KDPA.html - http://www.securityfocus.com/archive/1/419765/100/0/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57649-1&searchclause= - http://secunia.com/advisories/12375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17127 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:140 - http://www.securityfocus.com/bid/11025
CVE ID: CVE-2004-1171 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:00.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the user or (2) created by the SMB protocol handler, stores those credentials for plaintext in the user's .desktop file, which may be created with world-readable permissions, which could allow local users to obtain usernames and passwords for remote resources such as SMB shares. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13486 - http://www.kb.cert.org/vuls/id/305294 - http://www.securi
Container: References: - http://secunia.com/advisories/13486 - http://www.kb.cert.org/vuls/id/305294 - http://www.securityfocus.com/bid/11866 - http://securitytracker.com/id?1012471 - http://www.ciac.org/ciac/bulletins/p-051.shtml - http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1292.html - http://secunia.com/advisories/13560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18267 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:150 - http://marc.info/?l=bugtraq&m=110261063201488&w=2 - http://www.osvdb.org/12248 - http://www.sec-consult.com/index.php?id=118 - http://www.gentoo.org/security/en/glsa/glsa-200412-16.xml - http://marc.info/?l=bugtraq&m=11017878680
index.php?id=118 - http://www.gentoo.org/security/en/glsa/glsa-200412-16.xml - http://marc.info/?l=bugtraq&m=110178786809694&w=2 - http://secunia.com/advisories/13477 - http://www.kde.org/info/security/advisory-20041209-1.txt
CVE ID: CVE-2004-1172 State: PUBLISHED Published: 2004-12-22T05:00:00 Last Updated: 2024-08-08T00:39:01.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, allows remote attackers to execute arbitrary code via a registration request with a long hostname. Additional Analyst Notes: - CVE Program Container: References: - http://seer.support.veritas.com/docs/273419.htm - http://www.frsirt.com/exploits/20050111.101_BXEC.cpp.php - http://www.securityfocus.com/bid/11974 - http://seer.support.veritas.com/docs/273850.htm - http://www.kb.cert.org/vuls/i
http://www.securityfocus.com/bid/11974 - http://seer.support.veritas.com/docs/273850.htm - http://www.kb.cert.org/vuls/id/907729 - http://seer.support.veritas.com/docs/273422.htm - http://secunia.com/advisories/13495/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18506 - http://seer.support.veritas.com/docs/273420.htm - http://www.idefense.com/application/poi/display?id=169
CVE ID: CVE-2004-1173 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:39:01.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model (DOM) methods in the DHTML Dynamic HTML (DHTML) Editing Component (DEC) and Javascript that calls showModalDialog. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18444 - http://marc.info/?l=ntbugtraq&m=110271016129952&w=2 - http://marc.info/?l=bugtraq&m=110271114525795&w=2
CVE ID: CVE-2004-1174 State: PUBLISHED Published: 2005-01-22T05:00:00 Last Updated: 2024-08-08T00:39:00.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: direntry.c in Midnight Commander (mc) 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13863/ - http://securitytracker.com/id?1012903 - http://www.debian.org/security/2005/dsa-639 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18909 - http://www.redhat.com/support/errata/RHSA-2005-512.html
CVE ID: CVE-2004-1175 State: PUBLISHED Published: 2005-01-22T05:00:00 Last Updated: 2024-08-08T00:39:00.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18906 - http://secunia.com/advisories/13863/ - http://securitytracker.com/id?1012903 - http://www.debian.org/security/2005/dsa-639 - http://www.redhat.com/support/errata/RHSA-2005-512.html
CVE ID: CVE-2004-1176 State: PUBLISHED Published: 2005-01-22T05:00:00 Last Updated: 2024-08-08T00:39:00.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18911 - http://secunia.com/advisories/13863 - http://www.redhat.com/support/errata/RHSA-2005-217.html - http://securitytracker.com/id?1012903 - http://www.debian.org/security/2005/dsa-639 - http://www.gentoo.org/security/en/glsa/glsa-200502-24.xml
CVE ID: CVE-2004-1177 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:46:11.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110549296126351&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18854 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=287555 - http://secunia.com/advisories/13603 - http://www.mandriva.com/security/adviso
ian.org/cgi-bin/bugreport.cgi?bug=287555 - http://secunia.com/advisories/13603 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:015 - http://www.novell.com/linux/security/advisories/2005_07_mailman.html - http://www.debian.org/security/2005/dsa-674 - http://www.redhat.com/support/errata/RHSA-2005-235.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11113
CVE ID: CVE-2004-1179 State: PUBLISHED Published: 2004-12-31T05:00:00 Last Updated: 2024-08-08T00:46:11.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files via a symlink attack on temporary directories. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12078 - http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-12/0645.html - http://www.debian.org/security/2004/dsa-615 - http://secunia.com/advisories/13633/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18646
CVE ID: CVE-2004-1180 State: PUBLISHED Published: 2005-02-11T05:00:00 Last Updated: 2024-08-08T00:46:11.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows remote attackers to cause a denial of service (application crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-678 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:039 - http://secunia.com/advisories/14309 - http://www.novell.com/linux/download/updates/81_i386.html
CVE ID: CVE-2004-1181 State: PUBLISHED Published: 2005-01-22T05:00:00 Last Updated: 2024-08-08T00:46:11.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: htmlheadline before 21.8 allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-622 - http://www.securityfocus.com/bid/12147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18737 - http://secunia.com/advisories/13715 - http://securitytracker.com/id?1012756