Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-0515 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T00:17:15.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of console log files." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16289 - http://lists.seifried.org/pipermail/security/2004-May/003743.html - http://www.securityfocus.com/bid/10432 - http://securitytracker.com/id?1010330
CVE ID: CVE-2004-0516 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T00:17:15.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Mac OS X 10.3.4, related to "package installation scripts," a different vulnerability than CVE-2004-0517. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1010331 - http://lists.seifried.org/pipermail/security/2004-May/003743.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16290 - http://www.securityfocus.com/bid/10432
CVE ID: CVE-2004-0517 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T00:17:15.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Mac OS X 10.3.4, related to "handling of process IDs during package installation," a different vulnerability than CVE-2004-0516. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1010331 - http://lists.seifried.org/pipermail/security/2004-May/003743.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16290 - http://www.securityfocus.com/bid/10432
CVE ID: CVE-2004-0518 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T00:17:15.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to "the use of SSH and reporting errors," has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1010333 - http://lists.seifried.org/pipermail/security/2004-May/003743.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16288
CVE ID: CVE-2004-0519 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T00:17:15.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12289 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16025 - http://www.securityfocus.com/archive/1/361857 - http://www.novell.com/linux/security/advisories/2005_19_s
lities/16025 - http://www.securityfocus.com/archive/1/361857 - http://www.novell.com/linux/security/advisories/2005_19_sr.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1006 - http://www.securityfocus.com/advisories/6827 - http://secunia.com/advisories/11531 - http://secunia.com/advisories/11686 - http://secunia.com/advisories/11870 - http://www.debian.org/security/2004/dsa-535 - http://rhn.redhat.com/errata/RHSA-2004-240.html - https://bugzilla.fedora.us/show_bug.cgi?id=1733 - http://security.gentoo.org/glsa/glsa-200405-16.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10274 - http://marc.info/?l=bu
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10274 - http://marc.info/?l=bugtraq&m=108334862800260 - ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858 - http://www.securityfocus.com/bid/10246
CVE ID: CVE-2004-0520 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T00:17:15.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as demonstrated using read_body.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.rs-labs.com/adv/RS-Labs-Advisory-2004-1.txt - http://secunia.com/advisories/12289 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1012 - https://oval.cisecurity.org/repository/search/definition/oval%3A
/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1012 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10766 - http://www.gentoo.org/security/en/glsa/glsa-200406-08.xml - http://marc.info/?l=bugtraq&m=108611554415078&w=2 - http://www.securityfocus.com/advisories/6827 - http://secunia.com/advisories/11870 - http://www.debian.org/security/2004/dsa-535 - http://rhn.redhat.com/errata/RHSA-2004-240.html - https://bugzilla.fedora.us/show_bug.cgi?id=1733 - http://www.securityfocus.com/bid/10439 - ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858 - http://marc.info/?l=squ
dvisories/20040604-01-U.asc - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858 - http://marc.info/?l=squirrelmail-cvs&m=108532891231712
CVE ID: CVE-2004-0521 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T00:17:15.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12289 - http://www.securityfocus.com/bid/10397 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11446 - http://www.osvdb.org/6841 - http://www.securityfocus.com/advisories/6827 - http://secunia.com/advisories/11686 - h
446 - http://www.osvdb.org/6841 - http://www.securityfocus.com/advisories/6827 - http://secunia.com/advisories/11686 - http://secunia.com/advisories/11685 - http://secunia.com/advisories/11870 - http://marc.info/?l=squirrelmail-cvs&m=108309375029888 - http://www.debian.org/security/2004/dsa-535 - http://rhn.redhat.com/errata/RHSA-2004-240.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16235 - https://bugzilla.fedora.us/show_bug.cgi?id=1733 - http://security.gentoo.org/glsa/glsa-200405-16.xml - http://marc.info/?l=squirrelmail-cvs&m=108532891231712 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1033 - ftp://patches.sgi.com/support/free/se
l.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1033 - ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858 - http://www.securityfocus.com/advisories/7148 - http://www.ciac.org/ciac/bulletins/o-212.shtml
CVE ID: CVE-2004-0522 State: PUBLISHED Published: 2004-06-08T04:00:00 Last Updated: 2024-08-08T00:24:25.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-512 - http://www.securityfocus.com/bid/10451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16301 - http://secunia.com/advisories/11752 - http://security.gentoo.org/glsa/glsa-200406-10.xml
CVE ID: CVE-2004-0523 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T00:24:25.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860 - http://lwn.net/Articles/88206/ - http://www.redhat.com/support/errata/RHSA-2004-236.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A991 - http://www.debian.org/security/2004/dsa-520 - https://oval.ci
tory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A991 - http://www.debian.org/security/2004/dsa-520 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A724 - http://marc.info/?l=bugtraq&m=108612325909496&w=2 - http://www.kb.cert.org/vuls/id/686862 - http://www.gentoo.org/security/en/glsa/glsa-200406-21.xml - ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/16268 - http://marc.info/?l=bugtraq&m=108619161815320&w=2 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:056 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101512-1 - http://marc.inf
s/advisory.php?name=MDKSA-2004:056 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101512-1 - http://marc.info/?l=bugtraq&m=108619250923790&w=2 - http://www.securityfocus.com/bid/10448 - ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2002 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10295
CVE ID: CVE-2004-0524 State: PUBLISHED Published: 2004-06-08T04:00:00 Last Updated: 2024-08-08T00:24:25.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the chpasswd command in the Change_passwd plugin before 4.0, as used in SquirrelMail, allows local users to gain root privileges via a long user name. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11415 - http://marc.info/?l=bugtraq&m=108311782032370&w=2 - http://www.securityfocus.com/bid/10166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15889 - http://www.squirrelmail.org/plugin_view.php?id=117 - http://marc.info/?l=bugtraq&m=108222863917958&w=2
CVE ID: CVE-2004-0525 State: PUBLISHED Published: 2004-06-08T04:00:00 Last Updated: 2024-08-08T00:24:26.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Integrated Lights-Out (iLO) 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service (hang) by accessing iLO using the TCP/IP reserved port zero. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16251 - http://seclists.org/lists/bugtraq/2004/May/0281.html
CVE ID: CVE-2004-0526 State: PUBLISHED Published: 2004-06-08T04:00:00 Last Updated: 2024-08-08T00:24:25.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16102 - http://marc.info/?l=bugtraq&m=108422905510713&w=2 - http://www.securityfocus.com/bid/10308 - http://arch
ilities/16102 - http://marc.info/?l=bugtraq&m=108422905510713&w=2 - http://www.securityfocus.com/bid/10308 - http://archives.neohapsis.com/archives/bugtraq/2004-05/0161.html - http://www.kurczaba.com/securityadvisories/0405132poc.htm
CVE ID: CVE-2004-0527 State: PUBLISHED Published: 2004-06-08T04:00:00 Last Updated: 2024-08-08T00:24:26.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/6579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16102 - http://www.securityfocus.com/bid/10383
CVE ID: CVE-2004-0528 State: PUBLISHED Published: 2004-06-08T04:00:00 Last Updated: 2024-08-08T00:24:26.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netscape Navigator 7.1 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10389 - http://www.osvdb.org/6580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16102
CVE ID: CVE-2004-0529 State: PUBLISHED Published: 2004-06-08T04:00:00 Last Updated: 2024-08-08T00:24:25.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: The modified suexec program in cPanel, when configured for mod_php and compiled for Apache 1.3.31 and earlier without mod_phpsuexec, allows local users to execute untrusted shared scripts and gain privileges, as demonstrated using untainted scripts such as (1) proftpdvhosts or (2) addalink.cgi, a different vulnerability than CVE-2004-0490. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1010411 - http://marc.info/?l=bugtraq&m=108663003608211&w=2 - http://secunia.com/advisories/117
//securitytracker.com/id?1010411 - http://marc.info/?l=bugtraq&m=108663003608211&w=2 - http://secunia.com/advisories/11798 - http://bugzilla.cpanel.net/show_bug.cgi?id=668 - http://www.securityfocus.com/bid/10478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16347
CVE ID: CVE-2004-0530 State: PUBLISHED Published: 2004-06-08T04:00:00 Last Updated: 2024-08-08T00:24:25.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PHP package in Slackware 8.1, 9.0, and 9.1, when linked against a static library, includes /tmp in the search path, which allows local users to execute arbitrary code as the PHP user by inserting shared libraries into the appropriate path. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11760 - http://www.securityfocus.com/bid/10461 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.419765 - https://exchange.xforce.ibmcloud.com/vuln
/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.419765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16310
CVE ID: CVE-2004-0533 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T00:24:25.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17422 - http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0056.html - http://secunia.com/advisories/12587/ - http://www.securityfocus.com/bid/11208 - http://lists.grok.o
/2004-q3/0056.html - http://secunia.com/advisories/12587/ - http://www.securityfocus.com/bid/11208 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026549.html
CVE ID: CVE-2004-0534 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T00:24:26.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when uploading a document. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026550.html - http://secunia.com/advisories/12587/ - http://www.securityfocus.com/bid/11209 - http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0057.html -
s/12587/ - http://www.securityfocus.com/bid/11209 - http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0057.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17419
CVE ID: CVE-2004-0535 State: PUBLISHED Published: 2004-06-08T04:00:00 Last Updated: 2024-08-08T00:24:26.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10352 - http://www.redhat.com/support/errata/RHSA-2004-413.html - http://www.redhat.com/support/errata/RHSA-2004-418.html - http://www.kernel.org/pub/linux/kernel/v2.4/testing
413.html - http://www.redhat.com/support/errata/RHSA-2004-418.html - http://www.kernel.org/pub/linux/kernel/v2.4/testing/patch-2.4.27.log - http://lwn.net/Articles/91155/ - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=125168 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:062 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16159 - ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc - http://security.gentoo.org/glsa/glsa-200407-02.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11136 - http://www.novell.com/linux/security/advisories/2
org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11136 - http://www.novell.com/linux/security/advisories/2004_20_kernel.html
CVE ID: CVE-2004-0536 State: PUBLISHED Published: 2004-06-08T04:00:00 Last Updated: 2024-08-08T00:24:26.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16309 - http://marc.info/?l=bugtraq&m=108630983009228&w=2 - http://www.redhat.com/support/errata/RHSA-2004-244.html - http://security.gentoo.org/glsa/glsa-2004
08630983009228&w=2 - http://www.redhat.com/support/errata/RHSA-2004-244.html - http://security.gentoo.org/glsa/glsa-200406-02.xml - http://marc.info/?l=bugtraq&m=108627481507249&w=2 - http://www.securityfocus.com/bid/10454
CVE ID: CVE-2004-0537 State: PUBLISHED Published: 2004-06-08T04:00:00 Last Updated: 2024-08-08T00:24:25.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" (favicon) that is wider than expected, which could allow the web sites to spoof a trusted domain and facilitate phishing attacks using a wide icon and extra spaces. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10452 - http://secunia.com/advisories/11762 - http://osvdb.org/6590 - http://www.opera.com/linux/changelogs/751/index.dml - http://marc.info/?l=bugtraq&m=108627581717738&w=2 - https://exchange.
p://www.opera.com/linux/changelogs/751/index.dml - http://marc.info/?l=bugtraq&m=108627581717738&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16307 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022263.html - http://security.greymagic.com/security/advisories/gm007-op/
CVE ID: CVE-2004-0538 State: PUBLISHED Published: 2004-06-11T04:00:00 Last Updated: 2024-08-08T00:24:26.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: LaunchServices in Mac OS X 10.3.4 and 10.2.8 automatically registers and executes new applications, which could allow attackers to execute arbitrary code without warning the user. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=25785
CVE ID: CVE-2004-0539 State: PUBLISHED Published: 2004-06-11T04:00:00 Last Updated: 2024-08-08T00:24:26.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Show in Finder" button in the Safari web browser in Mac OS X 10.3.4 and 10.2.8 may execute downloaded applications, which could allow remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/773190 - http://docs.info.apple.com/article.html?artnum=25785
CVE ID: CVE-2004-0540 State: PUBLISHED Published: 2004-06-08T04:00:00 Last Updated: 2024-08-08T00:24:26.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is exactly 8 characters long, does not prevent users with expired passwords from logging on to the domain. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B830847 - http://secunia.com/advisories/11746/
CVE ID: CVE-2004-0541 State: PUBLISHED Published: 2004-06-10T04:00:00 Last Updated: 2024-08-08T00:24:25.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable). Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10722 - http://www.redhat.com/support/errata/RHSA-2004-242.html - http://www.gentoo.org/security/en/glsa/glsa-200406-13.xml - http://www.m
.redhat.com/support/errata/RHSA-2004-242.html - http://www.gentoo.org/security/en/glsa/glsa-200406-13.xml - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:059 - http://fedoranews.org/updates/FEDORA--.shtml - http://www.idefense.com/application/poi/display?id=107&type=vulnerabilities - https://exchange.xforce.ibmcloud.com/vulnerabilities/16360 - http://www.securityfocus.com/bid/10500 - ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc - http://www.trustix.net/errata/2004/0033/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A980
CVE ID: CVE-2004-0542 State: PUBLISHED Published: 2004-06-10T04:00:00 Last Updated: 2024-08-08T00:24:25.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arbitrary code, overwrite files, and access internal environment variables via (1) the "%", "|", or ">" characters to the escapeshellcmd function, or (2) the "%" character to the escapeshellarg function. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/release_4_3_7.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/16331 - http://www.idefense.com/ap
/www.php.net/release_4_3_7.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/16331 - http://www.idefense.com/application/poi/display?id=108