Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
7627839&w=2 - http://www.debian.org/security/2004/dsa-595 - http://secunia.com/advisories/13149/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18013 - http://www.securityfocus.com/bid/11647
CVE ID: CVE-2004-1053 State: PUBLISHED Published: 2004-11-24T05:00:00 Last Updated: 2024-08-08T00:39:00.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in fetch on FreeBSD 4.1 through 5.3 allows remote malicious servers to execute arbitrary code via certain HTTP headers in an HTTP response, which lead to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11702 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18160 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:16.fetch.asc
CVE ID: CVE-2004-1054 State: PUBLISHED Published: 2004-12-22T05:00:00 Last Updated: 2024-08-08T00:39:00.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privileges by modifying the PATH environment variable to point to a malicious "uname" program, which is executed from lsvpd after lsvpd has been invoked by invscout. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=171&type=vulnerabilities - https://exchange.xforce.ibmcloud.com/vulnerabilities/18619 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY
ilities - https://exchange.xforce.ibmcloud.com/vulnerabilities/18619 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY64852&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=IY64820&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=IY64976&apar=only
CVE ID: CVE-2004-1055 State: PUBLISHED Published: 2004-11-24T05:00:00 Last Updated: 2024-08-08T00:39:00.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PmaAbsoluteUri parameter, (2) the zero_rows parameter in read_dump.php, (3) the confirm form, or (4) an error message generated by the internal phpMyAdmin parser. Additional Analyst Notes: - CVE Program Container: References: - http://www.netvigilance.com/html/advisory0005.htm - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2004-3 - https://exchange.xfo
e.com/html/advisory0005.htm - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2004-3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18158
CVE ID: CVE-2004-1056 State: PUBLISHED Published: 2004-12-22T05:00:00 Last Updated: 2024-08-08T00:39:00.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct Rendering Manager (DRM) driver in Linux kernel 2.6 does not properly check the DMA lock, which could allow remote attackers or local users to cause a denial of service (X Server crash) and possibly modify the video output. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.fedora.us/show_bug.cgi?id=2336 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9795 - https://www.ubuntu.com/usn/usn-38-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/1
.mitre.oval%3Adef%3A9795 - https://www.ubuntu.com/usn/usn-38-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/15972 - http://www.redhat.com/support/errata/RHSA-2005-092.html - http://www.redhat.com/support/errata/RHSA-2005-551.html - http://secunia.com/advisories/17002 - http://www.redhat.com/support/errata/RHSA-2005-529.html - http://www.redhat.com/support/errata/RHSA-2005-663.html - http://www.vupen.com/english/advisories/2005/1878
CVE ID: CVE-2004-1057 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-08T00:39:00.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VM_IO flag, which causes incorrect reference counts and may lead to a denial of service (kernel panic) when accessing freed kernel pages. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2006-0140.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11474 - http://www.securityfocus.com/bid/12338 - http://www.redhat.com/support/errata/RHSA-200
%3Aorg.mitre.oval%3Adef%3A11474 - http://www.securityfocus.com/bid/12338 - http://www.redhat.com/support/errata/RHSA-2005-017.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19275 - http://www.redhat.com/support/errata/RHSA-2005-016.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=137821 - http://www.kernel.org/pub/linux/kernel/people/andrea/kernels/v2.4/2.4.23aa3/00_VM_IO-4 - http://secunia.com/advisories/18562
CVE ID: CVE-2004-1058 State: PUBLISHED Published: 2004-12-22T05:00:00 Last Updated: 2024-08-08T00:39:00.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18684 - http://secunia.com/advisories/19038 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17151 - http://secunia.com/advisories/19369 - http://secunia.com/advisories/21476 - http://www.securityfocus.com/bid/11
/17151 - http://secunia.com/advisories/19369 - http://secunia.com/advisories/21476 - http://www.securityfocus.com/bid/11937 - http://www.debian.org/security/2006/dsa-1018 - http://www.securityfocus.com/bid/11052 - http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml - http://secunia.com/advisories/19607 - http://www.redhat.com/support/errata/RHSA-2006-0190.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10427 - http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html - https://usn.ubuntu.com/38-1/ - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532 - ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U
gzilla.redhat.com/bugzilla/show_bug.cgi?id=152532 - ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U - http://www.redhat.com/support/errata/RHSA-2005-293.html - http://www.redhat.com/support/errata/RHSA-2006-0191.html
CVE ID: CVE-2004-1059 State: PUBLISHED Published: 2004-12-31T05:00:00 Last Updated: 2024-08-08T00:39:00.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) next and (2) prev result search pages, and the (3) extended and (4) simple search forms. Additional Analyst Notes: - CVE Program Container: References: - http://www.mikx.de/index.php?p=6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18434 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html - http://www.securityfocus.com/bid/11895 - h
ttp://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html - http://www.securityfocus.com/bid/11895 - http://www.mnogosearch.org/history.html
CVE ID: CVE-2004-1060 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-08T00:39:00.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPL
n different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A181 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A196 - https://oval.cisecurity.org/repository/search/definition/oval%
ory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A196 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A780 - http://www.securityfocus.com/bid/13124 - http://www.securityfocus.com/archive/1/418882/100/0/threaded - http://www.cisco.com/warp/public/707/cisco-sa-20050412-icmp.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3826 - http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A405 - http://marc.info/?l=bugtraq&m=112861397904255&w=2 - http://marc.info/?l=bugtraq&m=112861397904255&w=2 - https://oval.cisecurity.
arc.info/?l=bugtraq&m=112861397904255&w=2 - http://marc.info/?l=bugtraq&m=112861397904255&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A899 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.4/SCOSA-2006.4.txt - http://marc.info/?l=bugtraq&m=112861397904255&w=2 - http://secunia.com/advisories/18317 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2188 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A651 - http://www.uniras.gov.uk/niscc/docs/al-20050412-00308.html?lang=en - http://s
nition/oval%3Aorg.mitre.oval%3Adef%3A651 - http://www.uniras.gov.uk/niscc/docs/al-20050412-00308.html?lang=en - http://securityreason.com/securityalert/19 - http://securityreason.com/securityalert/57 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5386
CVE ID: CVE-2004-1061 State: PUBLISHED Published: 2004-12-31T05:00:00 Last Updated: 2024-08-08T00:39:00.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11, allows remote attackers to inject arbitrary HTML and web script via forced error messages, as demonstrated using the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001040 - http://www.mikx.de/index.php?p=6 - http://www.securityfocus.com/bid/12154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18728 - http://lists.grok.or
tp://www.securityfocus.com/bid/12154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18728 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html - https://bugzilla.mozilla.org/show_bug.cgi?id=272620
CVE ID: CVE-2004-1062 State: PUBLISHED Published: 2004-12-31T05:00:00 Last Updated: 2024-08-08T00:39:00.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via certain error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.mikx.de/index.php?p=6 - http://security.gentoo.org/glsa/glsa-200412-26.xml - http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html - http://www.novell.com/linux/security/advisories/2005_01_sr.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18718
CVE ID: CVE-2004-1063 State: PUBLISHED Published: 2004-12-08T05:00:00 Last Updated: 2024-08-08T00:39:00.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safe_mode_exec_dir restrictions and execute commands outside of the intended safe_mode_exec_dir via shell metacharacters in the current directory name. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion. Additional Analyst Notes: - CVE Program Container
change significantly in the future as a result of further discussion. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/12412 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:072 - http://www.securityfocus.com/bid/11964 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18511 - http://www.php.net/release_4_3_10.php - http://www.mandriva.com/security/advisories?name=MDKSA-2004:151 - http://www.hardened-php.net/advisories/012004.txt - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000915 - http://www.gentoo.org/security/en/glsa/glsa-200412-14.xml - http://www.securityfocus.com/archive/1/384545 - http://www.securityfocus.com/advis
security/en/glsa/glsa-200412-14.xml - http://www.securityfocus.com/archive/1/384545 - http://www.securityfocus.com/advisories/9028 - https://www.ubuntu.com/usn/usn-99-1/
CVE ID: CVE-2004-1064 State: PUBLISHED Published: 2004-12-08T05:00:00 Last Updated: 2024-08-08T00:39:00.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attackers to bypass safe mode. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:072 - http://www.secur
CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:072 - http://www.securityfocus.com/bid/11964 - http://www.php.net/release_4_3_10.php - http://www.mandriva.com/security/advisories?name=MDKSA-2004:151 - http://www.hardened-php.net/advisories/012004.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/18512 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000915 - http://www.gentoo.org/security/en/glsa/glsa-200412-14.xml - http://www.securityfocus.com/archive/1/384545 - https://www.ubuntu.com/usn/usn-99-2/ - http://www.securityfocus.com/advisories/9028 - https://www.ubuntu.com/usn/usn-99-1/
CVE ID: CVE-2004-1065 State: PUBLISHED Published: 2004-12-22T05:00:00 Last Updated: 2024-08-08T00:39:00.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-032.html - http://www.novell.com/linux/security/advisories/2005_02_php4_mod_php4.html - http://www.php.net/release_4_3_10.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10877 - http://www.ma
_3_10.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10877 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:151 - https://bugzilla.fedora.us/show_bug.cgi?id=2344 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18517 - http://msgs.securepoint.com/cgi-bin/get/bugtraq0412/157.html - http://www.securityfocus.com/advisories/9028 - http://www.redhat.com/support/errata/RHSA-2004-687.html
CVE ID: CVE-2004-1066 State: PUBLISHED Published: 2004-12-05T05:00:00 Last Updated: 2024-08-08T00:39:00.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a denial of service (panic) or read portions of kernel memory. NOTE: this candidate might be SPLIT into 2 separate items in the future. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18321 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:17.procf
nge.xforce.ibmcloud.com/vulnerabilities/18321 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:17.procfs.asc
CVE ID: CVE-2004-1067 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:00.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18333 - http://asg.web.cmu.edu/cyrus/download/imapd/changes.html - http://www.securityfocus.com/bid/11738 - https://www.ubuntu.com/usn/usn-37-1/
CVE ID: CVE-2004-1068 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: A "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://www.debian.org/security/2006/dsa-1082 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 - http://marc.info/?l=bugtraq&m=110306397320336&w=2 - https://bugzilla.fedora.us/show_bug.cgi?id=2336 - http://www.securityfocus.com/bid/11
?l=bugtraq&m=110306397320336&w=2 - https://bugzilla.fedora.us/show_bug.cgi?id=2336 - http://www.securityfocus.com/bid/11715 - http://www.novell.com/linux/security/advisories/2004_44_kernel.html - http://secunia.com/advisories/19607 - http://www.debian.org/security/2006/dsa-1070 - http://www.redhat.com/support/errata/RHSA-2004-537.html - http://secunia.com/advisories/20162 - http://www.securityfocus.com/archive/1/381689 - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U - http://www.redhat.com/support/errata/RHSA-2004-505.html - http://secunia.com/advisories/20202 - https://oval.c
02-01-U - http://www.redhat.com/support/errata/RHSA-2004-505.html - http://secunia.com/advisories/20202 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11384 - http://www.redhat.com/support/errata/RHSA-2004-504.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18230 - http://secunia.com/advisories/20338
CVE ID: CVE-2004-1069 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in SELinux 2.6.x through 2.6.9 allows local users to cause a denial of service (kernel crash) via SOCK_SEQPACKET unix domain sockets, which are not properly handled in the sock_dgram_sendmsg function. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 - http://marc.info/?l=bugtraq&m=110306397320336&w=2 - http://marc.info/?l=linux-kernel&m=110045613004761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18312
CVE ID: CVE-2004-1070 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://www.debian.org/security/2006/dsa-1082 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 - http://
http://www.debian.org/security/2006/dsa-1082 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 - http://www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt - https://bugzilla.fedora.us/show_bug.cgi?id=2336 - http://secunia.com/advisories/19607 - http://www.debian.org/security/2006/dsa-1070 - http://secunia.com/advisories/20162 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9450 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18025 - http://www.redhat.com/support/errata/RHSA-2004-549.html - http://www.debian.org/security/2006/dsa-1067 - http://www.securityfocus.com/bid/11646 - http://www.debian.org/security/2006/dsa-1069 - ftp:
rg/security/2006/dsa-1067 - http://www.securityfocus.com/bid/11646 - http://www.debian.org/security/2006/dsa-1069 - ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U - http://www.redhat.com/support/errata/RHSA-2004-505.html - http://secunia.com/advisories/20202 - http://www.redhat.com/support/errata/RHSA-2004-504.html - http://secunia.com/advisories/20338
CVE ID: CVE-2004-1071 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an incorrect mapped image and may allow local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://www.debian.org/security/2006/dsa-1082 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 - http://www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt - https
ndriva.com/security/advisories?name=MDKSA-2005:022 - http://www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt - https://bugzilla.fedora.us/show_bug.cgi?id=2336 - http://secunia.com/advisories/19607 - http://www.debian.org/security/2006/dsa-1070 - http://www.redhat.com/support/errata/RHSA-2004-537.html - http://secunia.com/advisories/20162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18025 - http://www.debian.org/security/2006/dsa-1067 - http://www.securityfocus.com/bid/11646 - http://www.debian.org/security/2006/dsa-1069 - ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U - http://www.redhat.com/support/errata/RHSA-2004-505.html - http://secunia.com/advisories
urity/advisories/20060402-01-U - http://www.redhat.com/support/errata/RHSA-2004-505.html - http://secunia.com/advisories/20202 - http://www.redhat.com/support/errata/RHSA-2004-504.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9917 - http://secunia.com/advisories/20338
CVE ID: CVE-2004-1072 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade