Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-0358 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in VirtuaNews Admin Panel Pro 1.0.3 allows remote attackers to execute arbitrary script as other users via (1) the mainnews parameter in admin.php, (2) the expand parameter in admin.php, (3) the id parameter in admin.php, (4) the catid parameter in admin.php, or (5) an unnamed parameter during the newslogo_upload action in admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107851556116088&w=2 - http://archives.neohapsis.com/archives
gram Container: References: - http://marc.info/?l=bugtraq&m=107851556116088&w=2 - http://archives.neohapsis.com/archives/bugtraq/2004-03/0069.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15402 - http://www.securityfocus.com/bid/9812 - http://www.securityfocus.com/bid/9819
CVE ID: CVE-2004-0359 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php for Invision Power Board 1.3 final allows remote attackers to execute arbitrary script as other users via the (1) c, (2) f, (3) showtopic, (4) showuser, or (5) username parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9768 - http://www.osvdb.org/4154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15403 - http://marc.info/?l=bugtraq&m=107851589701916&w=2 - http://secunia.com/advisories/11053
CVE ID: CVE-2004-0360 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in passwd(1) in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57454 - http://marc.info/?l=bugtraq&m=107852274423414&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15327 - http://www.ciac.org/ciac/bulletins/o-088.shtml - http://www.kb.cert.org/vuls/id/694782 - http://www.securityfocus.com/bid/9757
CVE ID: CVE-2004-0361 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation fault) by creating a new Array object with a large size value, then writing into that array. Additional Analyst Notes: - CVE Program Container: References: - http://www.insecure.ws/article.php?story=2004021918172533 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15413 - http://marc.info/?l=bugtraq&m=107861828510106&w=2 - http://www.securityfocus.com/bid/9815
CVE ID: CVE-2004-0362 State: PUBLISHED Published: 2004-03-23T05:00:00 Last Updated: 2024-08-08T00:17:14.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a SRV_USER_ONLINE response packet and a SRV_META_USER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm. Additional Analyst Notes: - CVE Program Container: References: - http://xforce.
fields, as exploited by the Witty worm. Additional Analyst Notes: - CVE Program Container: References: - http://xforce.iss.net/xforce/alerts/id/166 - http://www.securityfocus.com/bid/9913 - http://secunia.com/advisories/11073 - http://www.ciac.org/ciac/bulletins/o-104.shtml - http://www.eeye.com/html/Research/Advisories/AD20040318.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15442 - http://www.osvdb.org/4355 - http://www.kb.cert.org/vuls/id/947254 - http://marc.info/?l=bugtraq&m=107965651712378&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15543
CVE ID: CVE-2004-0363 State: PUBLISHED Published: 2004-03-23T05:00:00 Last Updated: 2024-08-08T00:17:14.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107980262324362&w=2 - http://secunia.com/advisories/11169 - http://www.nextgenss.com/advisories/antispam.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/15536 - http://m
http://www.nextgenss.com/advisories/antispam.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/15536 - http://marc.info/?l=bugtraq&m=107970870606638&w=2 - http://www.kb.cert.org/vuls/id/344718 - http://www.securityfocus.com/bid/9916 - http://www.sarc.com/avcenter/security/Content/2004.03.19.html
CVE ID: CVE-2004-0364 State: PUBLISHED Published: 2004-03-23T05:00:00 Last Updated: 2024-08-08T00:17:14.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9915 - http://marc.info/?l=bugtraq&m=107980262324362&w=2 - http://www.nextgenss.com/advisories/nisrce.txt - http://secunia.com/advisories/11168 - http://marc.info/?l=bugtraq&m=107970885922442&w=2 - http://www.kb.cert.org/vuls/id/549054 - ht
ia.com/advisories/11168 - http://marc.info/?l=bugtraq&m=107970885922442&w=2 - http://www.kb.cert.org/vuls/id/549054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15538 - http://www.sarc.com/avcenter/security/Content/2004.03.19.html
CVE ID: CVE-2004-0365 State: PUBLISHED Published: 2004-03-25T05:00:00 Last Updated: 2024-08-08T00:17:14.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a malformed RADIUS packet that triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200403-07.xml - http://www.redhat.com/support/errata/RHSA-2004-137.html - http://www.redhat.com/support/errata/RHSA-2004-136.html - http://secunia.com/advisories/11185 - http://marc.info/?l=bugtraq&m=1080580053243
om/support/errata/RHSA-2004-136.html - http://secunia.com/advisories/11185 - http://marc.info/?l=bugtraq&m=108058005324316&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000835 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A891 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9196 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A879 - http://www.ethereal.com/appnotes/enpa-sa-00013.html - http://marc.info/?l=bugtraq&m=108213710306260&w=2 - http://www.kb.cert.org/vuls/id/124454 - http://marc.info/?l=ethereal-dev&m=107962966700423&w=2 - https://exchange.xfor
- http://www.kb.cert.org/vuls/id/124454 - http://marc.info/?l=ethereal-dev&m=107962966700423&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15571 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:024
CVE ID: CVE-2004-0366 State: PUBLISHED Published: 2004-04-06T04:00:00 Last Updated: 2024-08-08T00:17:14.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statements. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10266 - http://secunia.com/advisories/11237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15651 - http://www.debian.org/security/2004/dsa-469
CVE ID: CVE-2004-0367 State: PUBLISHED Published: 2004-03-25T05:00:00 Last Updated: 2024-08-08T00:17:14.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Presentation protocol selector. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200403-07.xml - http://www.redhat.com/support/errata/RHSA-2004-137.html - http://www.kb.cert.org/vuls/id/792286 - http://www.redhat.com/support/errata/RHSA-2004-136.html - http://secunia.com/advisories/11185 - http://marc.info/?l=bugtraq&m=108058005324316&w=2 - https://exchange.xforce.ibmclou
ttp://secunia.com/advisories/11185 - http://marc.info/?l=bugtraq&m=108058005324316&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15570 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000835 - http://www.ethereal.com/lists/ethereal-dev/200404/msg00296.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A880 - http://www.ethereal.com/appnotes/enpa-sa-00013.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11071 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A905 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:024
CVE ID: CVE-2004-0368 State: PUBLISHED Published: 2004-03-25T05:00:00 Last Updated: 2024-08-08T00:17:14.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15581 - http://lists.immunitysec.com/pipermail/dailydave/2004-March/000402.html - http://secunia.com/advisories/11210/ - http://www.immunitysec.com/downloads/dtlogin.sxw.pdf - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57539-1&sear
://www.immunitysec.com/downloads/dtlogin.sxw.pdf - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57539-1&searchclause=security - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0064.html - ftp://patches.sgi.com/support/free/security/advisories/20040801-01-P - http://secunia.com/advisories/11214/ - http://www.securityfocus.com/bid/9958 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1436 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101478-1 - http://www.auscert.org.au/render.html?it=4103&cid=3734 - http://secunia.com/advisories/11495/ - http://www.ciac.org/ciac/bulletins/o-129.shtml - http://secunia.com/advisories/1161
tp://secunia.com/advisories/11495/ - http://www.ciac.org/ciac/bulletins/o-129.shtml - http://secunia.com/advisories/11614/ - http://www.kb.cert.org/vuls/id/179804
CVE ID: CVE-2004-0369 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T00:17:14.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload. Additional Analyst Notes: - CVE Program Container: References: - http://www.auscert.org.au/render.html?it=4339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15669 - http://xforce.iss.net/xforce/alerts/id/181 - http://securityresponse.symantec.com/avcenter/secu
/vulnerabilities/15669 - http://xforce.iss.net/xforce/alerts/id/181 - http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html - http://www.ciac.org/ciac/bulletins/o-206.shtml - http://www.securityfocus.com/bid/11039
CVE ID: CVE-2004-0370 State: PUBLISHED Published: 2004-04-06T04:00:00 Last Updated: 2024-08-08T00:17:14.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause a system panic. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11233 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15662 - http://www.securityfocus.com/bid/9992 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:06.ipv6.asc
CVE ID: CVE-2004-0371 State: PUBLISHED Published: 2004-04-06T04:00:00 Last Updated: 2024-08-08T00:17:14.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the cross-realm trust path. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200404-09.xml - ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/009_kerberos.patch - https://exchange.xforce.ibmcloud.com/vulnerabilities/15701 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advi
erberos.patch - https://exchange.xforce.ibmcloud.com/vulnerabilities/15701 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:08.heimdal.asc - http://www.debian.org/security/2004/dsa-476 - http://www.pdc.kth.se/heimdal/advisory/2004-04-01/
CVE ID: CVE-2004-0372 State: PUBLISHED Published: 2004-03-27T05:00:00 Last Updated: 2024-08-08T00:17:14.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107997911025558&w=2 - http://www.debian.org/security/2004/dsa-477 - http://www.securityfocus.com/bid/9939 - http://security.gentoo.org/glsa/glsa-200404-20.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/15564
CVE ID: CVE-2004-0374 State: PUBLISHED Published: 2004-04-06T04:00:00 Last Updated: 2024-08-08T00:17:14.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "__SQLUSER__" string. Additional Analyst Notes: - CVE Program Container: References: - http://www.icdevgroup.org/pipermail/interchange-announce/2004/000043.html - http://www.securityfocus.com/bid/10005 - http://ftp.icdevgroup.org/interchange/5.0/WHATSNEW - https://exchange.xforce.ibmcloud.com/vulnerabilities/15670 - http://secunia.com/advisories/11234 -
change/5.0/WHATSNEW - https://exchange.xforce.ibmcloud.com/vulnerabilities/15670 - http://secunia.com/advisories/11234 - http://www.debian.org/security/2004/dsa-471
CVE ID: CVE-2004-0375 State: PUBLISHED Published: 2004-05-05T04:00:00 Last Updated: 2024-08-08T00:17:14.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1009379 - http://www.symantec.com/avcenter/security/Content/2004.04.20.html - http://securitytr
//securitytracker.com/id?1009379 - http://www.symantec.com/avcenter/security/Content/2004.04.20.html - http://securitytracker.com/id?1009380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15936 - http://www.eeye.com/html/Research/Upcoming/20040309.html - http://marc.info/?l=bugtraq&m=108275582432246&w=2 - http://www.securityfocus.com/bid/9912
CVE ID: CVE-2004-0376 State: PUBLISHED Published: 2004-04-06T04:00:00 Last Updated: 2024-08-08T00:17:14.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: oftpd 0.3.6 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command with a large value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11220 - http://www.debian.org/security/2004/dsa-473 - http://security.gentoo.org/glsa/glsa-200403-08.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/15622 - http://www.securityfocus.com/bid/9980 - http://www.time-travellers.org/oftpd/oftpd-dos.html
CVE ID: CVE-2004-0377 State: PUBLISHED Published: 2004-04-06T04:00:00 Last Updated: 2024-08-08T00:17:14.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end in a backslash character. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15732 - http://marc.info/?l=bugtraq&m=108118694327979&w=2 - http://public.activestate.com/cgi-bin/perlbrowse?patch=22552 - http://www.kb.cert.org/vuls/id/722414 - http://www.idefense.com/
public.activestate.com/cgi-bin/perlbrowse?patch=22552 - http://www.kb.cert.org/vuls/id/722414 - http://www.idefense.com/application/poi/display?id=93&type=vulnerabilities - http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019794.html
CVE ID: CVE-2004-0378 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0379 State: PUBLISHED Published: 2004-04-07T04:00:00 Last Updated: 2024-08-08T00:17:14.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary web content and steal cookies via certain server scripts. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15729 - http://marc.info/?l=bugtraq&m=108118352303273&w=2
CVE ID: CVE-2004-0380 State: PUBLISHED Published: 2004-04-06T04:00:00 Last Updated: 2024-08-08T00:17:14.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the "MHTML URL Processing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/s
ulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A990 - http://www.securityfocus.com/bid/9105 - http://www.kb.cert.org/vuls/id/323070 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15705 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-013 - http://www.securityfocus.com/bid/9658 - http://www.us-cert.gov/cas/techalerts/TA04-104A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A882 - http://www.k-otik.ne
html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A882 - http://www.k-otik.net/bugtraq/02.18.InternetExplorer.php - http://www.securityfocus.com/archive/1/358913 - http://www.securityfocus.com/archive/1/354447 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1028 - http://secunia.com/advisories/10523
CVE ID: CVE-2004-0381 State: PUBLISHED Published: 2004-04-06T04:00:00 Last Updated: 2024-08-08T00:17:14.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11557 - http://www.securityfocus.com/bid/9976 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15617 - http://www.debian.org/security/2004/dsa-483 - http://security.gentoo.org/glsa/glsa-200405-20.xml - http://www.mandriva.com/security/adviso
org/security/2004/dsa-483 - http://security.gentoo.org/glsa/glsa-200405-20.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2004:034 - http://www.redhat.com/support/errata/RHSA-2004-597.html - http://www.ciac.org/ciac/bulletins/p-018.shtml - http://marc.info/?l=bugtraq&m=108206802810402&w=2 - http://www.redhat.com/support/errata/RHSA-2004-569.html - http://marc.info/?l=bugtraq&m=108023246916294&w=2
CVE ID: CVE-2004-0382 State: PUBLISHED Published: 2004-04-07T04:00:00 Last Updated: 2024-08-08T00:17:14.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly related to a configuration file setting. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15769 - http://lists.apple.com/mhonarc/security-announce/msg00047.html - http://docs.info.apple.com/article.html?artnum=61798
CVE ID: CVE-2004-0383 State: PUBLISHED Published: 2004-04-07T04:00:00 Last Updated: 2024-08-08T00:17:14.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Mail for Mac OS X 10.3.3 and 10.2.8, with unknown impact, related to "the handling of HTML-formatted email." Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/mhonarc/security-announce/msg00047.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15768 - http://docs.info.apple.com/article.html?artnum=61798
CVE ID: CVE-2004-0385 State: PUBLISHED Published: 2004-04-16T04:00:00 Last Updated: 2024-08-08T00:17:14.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener. NOTE: due to the vagueness of the Oracle advisory, it is not clear whether there are additional issues besides this overflow, although the advisory alludes to multiple "vulnerabilities." Additional Analyst Notes: - CVE Program Container: References: - http://www.inaccessnetworks.com/ian/services/seca
ies." Additional Analyst Notes: - CVE Program Container: References: - http://www.inaccessnetworks.com/ian/services/secadv01.txt - http://otn.oracle.com/deploy/security/pdf/2004alert66.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/15463 - http://www.osvdb.org/4249 - http://secunia.com/advisories/11118 - http://marc.info/?l=bugtraq&m=108144419001770&w=2 - http://www.kb.cert.org/vuls/id/413006 - http://marc.info/?l=bugtraq&m=107945649127635&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0078.html - http://www.securityfocus.com/bid/9868