Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-1021 State: PUBLISHED Published: 2004-11-24T05:00:00 Last Updated: 2024-08-08T00:39:00.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: iCal before 1.5.4 on Mac OS X 10.2.3, and other later versions, does not alert the user when handling calendars that use alarms, which allows attackers to execute programs and send e-mail via alarms. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18209 - http://lists.apple.com/archives/security-announce//2004/Nov/msg00000.html
CVE ID: CVE-2004-1022 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:38:59.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110304957607578&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18470
CVE ID: CVE-2004-1023 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:39:00.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windows based systems, do not modify the ACLs for critical files, which allows local users with Power Users privileges to modify programs, install malicious DLLs in the plug-ins folder, and modify XML files related to configuration. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18471 - http://marc.info/?l=bugtraq&m=110305387813002&w=2
CVE ID: CVE-2004-1025 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:39:00.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:007 - http://www.securityfocus.com/bid/11830 - http://www.redhat.com/support/errata/RHSA-2004-651.html - https://oval.cisecurity.org/repository/search/definition/o
0 - http://www.redhat.com/support/errata/RHSA-2004-651.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10786
CVE ID: CVE-2004-1026 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:00.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:007 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10771 - http://www.securityfocus.com/bid/11830 - http://ww
rg/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10771 - http://www.securityfocus.com/bid/11830 - http://www.redhat.com/support/errata/RHSA-2004-651.html - http://www.gentoo.org/security/en/glsa/glsa-200412-03.xml - http://www.debian.org/security/2005/dsa-628
CVE ID: CVE-2004-1027 State: PUBLISHED Published: 2004-11-16T05:00:00 Last Updated: 2024-08-08T00:38:59.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the -x (extract) command line option in unarj allows remote attackers to overwrite arbitrary files via an arj archive with filenames that contain .. (dot dot) sequences. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17684 - http://www.debian.org/security/2005/dsa-652 - http://www.redhat.com/support/errata/RHSA-2005-007.html - http://www.debian.org/security/2005/dsa-628 - http://www.securityfocus.com/bid/11436 - http://l
ata/RHSA-2005-007.html - http://www.debian.org/security/2005/dsa-628 - http://www.securityfocus.com/bid/11436 - http://lwn.net/Articles/121827/ - http://security.gentoo.org/glsa/glsa-200411-29.xml - http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027348.html
CVE ID: CVE-2004-1028 State: PUBLISHED Published: 2004-12-22T05:00:00 Last Updated: 2024-08-08T00:39:00.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious "grep" program, which is executed from chcod. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18625 - http://www.idefense.com/application/poi/display?id=170&type=vulnerabilities - http://www-1.ibm.com/support/search.wss?rs=0&q=IY64355&apar=only - http://www-1.ibm
isplay?id=170&type=vulnerabilities - http://www-1.ibm.com/support/search.wss?rs=0&q=IY64355&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=IY64356&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=IY64354&apar=only
CVE ID: CVE-2004-1029 State: PUBLISHED Published: 2004-11-24T05:00:00 Last Updated: 2024-08-08T00:39:00.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=158&type=vulnerabilities - http://jouko.iki.fi/adv/javaplugin.htm
: - http://www.idefense.com/application/poi/display?id=158&type=vulnerabilities - http://jouko.iki.fi/adv/javaplugin.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5674 - http://lists.apple.com/archives/security-announce/2005/Feb/msg00000.html - http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html - http://secunia.com/advisories/13271 - http://secunia.com/advisories/29035 - http://securityreason.com/securityalert/61 - http://www.securityfocus.com/bid/12317 - http://www.vupen.com/english/advisories/2008/0599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18188 - http://sunsolve.sun.com/sear
english/advisories/2008/0599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18188 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101523-1 - http://www.kb.cert.org/vuls/id/760344 - http://www-1.ibm.com/support/docview.wss?uid=swg21257249 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57591-1
CVE ID: CVE-2004-1030 State: PUBLISHED Published: 2004-11-24T05:00:00 Last Updated: 2024-08-08T00:39:00.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file that can not be parsed in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false - https://exchange.xforce.ibmcloud.com/vulnerabilities/18075 - http://www.securityfocus.com/bid/11684 - http://security.gentoo.or
/exchange.xforce.ibmcloud.com/vulnerabilities/18075 - http://www.securityfocus.com/bid/11684 - http://security.gentoo.org/glsa/glsa-200411-27.xml
CVE ID: CVE-2004-1031 State: PUBLISHED Published: 2004-11-24T05:00:00 Last Updated: 2024-08-08T00:39:00.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the fcronsighup configuration file to a /proc entry that is owned by root but modifiable by the user, such as /proc/self/cmdline or /proc/self/environ. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false - http://www.securityfocu
http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false - http://www.securityfocus.com/bid/11684 - http://security.gentoo.org/glsa/glsa-200411-27.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/18076
CVE ID: CVE-2004-1032 State: PUBLISHED Published: 2004-11-24T05:00:00 Last Updated: 2024-08-08T00:39:00.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty files via a target filename with a large number of leading slash (/) characters such that fcronsighup does not properly append the intended fcrontab.sig to the resulting string. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false - http://security.gentoo.org/glsa/glsa-200411-27.xml - http
on/poi/display?id=157&type=vulnerabilities&flashstatus=false - http://security.gentoo.org/glsa/glsa-200411-27.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/18077
CVE ID: CVE-2004-1033 State: PUBLISHED Published: 2004-11-24T05:00:00 Last Updated: 2024-08-08T00:39:00.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false - http://www.securityfocus.com/bid/11684 - http://security.gentoo.org/glsa/glsa-200411-27.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/18078
CVE ID: CVE-2004-1034 State: PUBLISHED Published: 2004-11-16T05:00:00 Last Updated: 2024-08-08T00:39:00.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11528 - http://security.gentoo.org/glsa/glsa-200411-14.xml - http://sourceforge.net/tracker/index.php?func=detail&aid=1060299&group_id=9
ecurity.gentoo.org/glsa/glsa-200411-14.xml - http://sourceforge.net/tracker/index.php?func=detail&aid=1060299&group_id=9655&atid=109655 - http://secunia.com/advisories/13117/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/17849 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028061.html
CVE ID: CVE-2004-1035 State: PUBLISHED Published: 2004-11-16T05:00:00 Last Updated: 2024-08-08T00:38:59.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in (1) imapcommon.c, (2) main.c, (3) request.c, and (4) select.c for up-imapproxy IMAP proxy 1.2.2 allow remote attackers to cause a denial of service (server crash) and possibly leak sensitive information via certain literal values that are not properly handled when using the IMAP_Line_Read function. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109995749510773&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17999
CVE ID: CVE-2004-1036 State: PUBLISHED Published: 2004-11-16T05:00:00 Last Updated: 2024-08-08T00:39:00.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier, and 1.5.1-cvs before 23rd October 2004, allows remote attackers to execute arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html - http://www.gentoo.org/security/en/glsa/glsa-200411-25.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/18031 - http://voxel.dl.sourcefor
rity/en/glsa/glsa-200411-25.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/18031 - http://voxel.dl.sourceforge.net/sourceforge/squirrelmail/sm143a-xss.diff - http://www.squirrelmail.org/ - http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9592 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000905 - http://marc.info/?l=bugtraq&m=110012133608004&w=2
CVE ID: CVE-2004-1037 State: PUBLISHED Published: 2004-11-19T05:00:00 Last Updated: 2024-08-08T00:39:00.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000918 - http://www.securityfocus.com/bid/11674 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18062 - http://twiki.org/cgi-bin/view/Codev/SecurityAlertExecuteCommandsWithSearch - http://archives.neohapsis.com/archives/bugtraq/2004-11/0201.html - http://security.g
ityAlertExecuteCommandsWithSearch - http://archives.neohapsis.com/archives/bugtraq/2004-11/0201.html - http://security.gentoo.org/glsa/glsa-200411-33.xml - http://marc.info/?l=bugtraq&m=110037207516456&w=2 - http://www.ciac.org/ciac/bulletins/p-039.shtml
CVE ID: CVE-2004-1038 State: PUBLISHED Published: 2004-11-16T05:00:00 Last Updated: 2024-08-08T00:38:59.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit. NOTE: this was reported in 2008 to affect Windows Vista, but some Linux-based operating systems have protection mechanisms against this attack. Additional Analyst Notes: - CVE Program Container: References: - http://pacsec.jp/advisories.html -
against this attack. Additional Analyst Notes: - CVE Program Container: References: - http://pacsec.jp/advisories.html - http://www.securityfocus.com/archive/1/489330/100/0/threaded - http://www.securityfocus.com/archive/1/489189/100/0/threaded - http://www.securityfocus.com/archive/1/489163/100/0/threaded - http://it.slashdot.org/article.pl?sid=08/03/04/1258210 - http://marc.info/?l=bugtraq&m=109881362530790&w=2 - http://www.securityfocus.com/archive/1/489295/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/18041 - http://md.hudora.de/presentations/firewire/2005-firewire-cansecwest.pdf - http://www.securityfocus.com/archive/1/489296/100/0/threaded - http://www.securityf
ewire/2005-firewire-cansecwest.pdf - http://www.securityfocus.com/archive/1/489296/100/0/threaded - http://www.securityfocus.com/archive/1/489269/100/0/threaded - http://www.securityfocus.com/archive/1/489322/100/0/threaded - http://www.sec-consult.com/fileadmin/Whitepapers/Vista_Physical_Attacks.pdf - http://www.securityfocus.com/archive/1/489212/100/0/threaded - http://www.securityfocus.com/archive/1/489175/100/0/threaded - http://www.securityfocus.com/archive/1/489257/100/0/threaded - http://www.securityfocus.com/archive/1/489342/100/0/threaded - http://storm.net.nz/static/files/ab_firewire_rux2k6-final.pdf - http://storm.net.nz/projects/16 - http://www.theage.com.au/news/security/hack-in
ic/files/ab_firewire_rux2k6-final.pdf - http://storm.net.nz/projects/16 - http://www.theage.com.au/news/security/hack-into-a-windows-pc-no-password-needed/2008/03/04/1204402423638.html - http://www.securityfocus.com/archive/1/489335/100/0/threaded
CVE ID: CVE-2004-1039 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:39:00.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests, which causes inetd to launch a separate process for each request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13805 - http://www.securityfocus.com/archive/1/386814 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.1/SCOSA-2005.1.txt - http://www.securityfocus
s.com/archive/1/386814 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.1/SCOSA-2005.1.txt - http://www.securityfocus.com/bid/12225
CVE ID: CVE-2004-1043 State: PUBLISHED Published: 2004-12-31T05:00:00 Last Updated: 2024-08-08T00:39:00.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript to be executed, as demonstrated using "writehta.txt" and the ADODB recordset, which saves a .HTA file to the local system, aka the "HTML Help ActiveX control Cross Domain Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - h
TML Help ActiveX control Cross Domain Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1349 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1963 - http://www.kb.cert.org/vuls/id/972415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18311 - http://archives.neohapsis.com/archives/bugtraq/2004-12/0426.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2830 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-001 - http://www.us-cert.gov/cas/techalerts/TA05-012B
s.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-001 - http://www.us-cert.gov/cas/techalerts/TA05-012B.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3496
CVE ID: CVE-2004-1049 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:39:00.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13645 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3220 - https://oval.cisecurity.org/repository/search/def
.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3220 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3097 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2956 - http://marc.info/?l=bugtraq&m=110382891718076&w=2 - http://securitytracker.com/id?1012684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18668 - http://www.ciac.org/ciac/bulletins/p-094.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3355 - http://www.securityfocus.com/bid/12095 - http://www.xfocus.ne
ory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3355 - http://www.securityfocus.com/bid/12095 - http://www.xfocus.net/flashsky/icoExp/index.html - http://www.us-cert.gov/cas/techalerts/TA05-012A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4671 - http://www.osvdb.org/12623 - http://www.kb.cert.org/vuls/id/625856
CVE ID: CVE-2004-1050 State: PUBLISHED Published: 2004-11-18T05:00:00 Last Updated: 2024-08-08T00:38:59.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/842160 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html - https://docs.microsoft.com/en-us/security-updates
lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-040 - http://marc.info/?l=bugtraq&m=109942758911846&w=2 - http://www.securityfocus.com/bid/11515 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1294 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html - http://www.us-cert.gov/cas/techalerts/TA04-315A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17889 - http://secunia.com/advisories/12959/ - http://www.securityfocus.com/archive/1/379261 - http://www.us-cert.gov/cas/techalerts/TA04-336A.html
CVE ID: CVE-2004-1051 State: PUBLISHED Published: 2004-11-18T05:00:00 Last Updated: 2024-08-08T00:39:00.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname. Additional Analyst Notes: - CVE Program Container: References: - https://www.ubuntu.com/usn/usn-28-1/ - http://www.sudo.ws/sudo/alerts/bash_functions.html - http://marc.info/?l=bugtraq&m=110598298225675&w=2 - http://marc.info/?l=bugtraq&m=110028877431192&w=2 - http://www.mandriva.
://marc.info/?l=bugtraq&m=110598298225675&w=2 - http://marc.info/?l=bugtraq&m=110028877431192&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:133 - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html - http://www.securityfocus.com/bid/11668 - http://www.debian.org/security/2004/dsa-596 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18055 - http://www.trustix.org/errata/2004/0061/
CVE ID: CVE-2004-1052 State: PUBLISHED Published: 2004-11-18T05:00:00 Last Updated: 2024-08-08T00:39:00.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters. Additional Analyst Notes: - CVE Program Container: References: - http://security.lss.hr/en/index.php?page=details&ID=LSS-2004-11-03 - http://marc.info/?l=bugtraq&m=110011817627839&w=2 - http://www.debian.org/security/2004/dsa-595 - http://secunia.com/advisories/13149/ - https://exchange.xfor