Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-0676 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbitrary files via .. (dot dot) and // (double slash) sequences in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.haxorcitos.com/Fastream_advisory.txt - http://www.securityfocus.com/bid/10658 - http://marc.info/?l=bugtraq&m=108904874104880&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16613
CVE ID: CVE-2004-0677 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service (temporary hang) via the cd command with an unusual argument, possibly due to multiple leading slashes and/or an access to the floppy drive ("A"). Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108904874104880&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16615
CVE ID: CVE-2004-0678 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to execute arbitrary script as other users via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10659 - http://www.autistici.org/fdonato/advisory/12PlanetChatServer2.9-adv.txt - http://marc.info/?l=bugtraq&m=108904648728706&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16605
CVE ID: CVE-2004-0679 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/560 - http://www.bandecon.com/advisory/unreal.txt - http://marc.info/?l=bugtraq&m=108904813003166&w=2 - http://www.securityfocus.com/bid/10663 - http://www.unrealircd.com/ - https://exchange.xforce.i
&m=108904813003166&w=2 - http://www.securityfocus.com/bid/10663 - http://www.unrealircd.com/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/16610
CVE ID: CVE-2004-0680 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108915255520924&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16639 - http://www.securityfocus.com/bid/10669
CVE ID: CVE-2004-0681 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffice_message.asp, (3) comersus_supportError.asp, or (4) comersus_message.asp in Comersus Cart 5.09 allow remote attackers to execute web script as other users via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16646 - http://www.securityfocus.com/bid/10674 - http://marc.info/?l=bugtraq&m=108922169327403&w=2
CVE ID: CVE-2004-0682 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly modifying them in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10674 - http://marc.info/?l=bugtraq&m=108922336529987&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16645
CVE ID: CVE-2004-0683 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service (CPU consumption) via a compressed archive that contains a large number of directories. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108938579712894&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16658
CVE ID: CVE-2004-0684 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebSphere Edge Component Caching Proxy in WebSphere Edge Server 5.02, with the JunctionRewrite directive enabled, allows remote attackers to cause a denial of service via an HTTP GET request without any parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16607 - http://marc.info/?l=bugtraq&m=108938997528245&w=2 - http://www.cybsec.com/vuln/IBM-WebSphere-Edge-Server-DOS.pdf
CVE ID: CVE-2004-0685 State: PUBLISHED Published: 2004-10-26T04:00:00 Last Updated: 2024-08-08T00:24:27.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://www.kb.cert.org/vuls/id/981134 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16931 - http://www.securityspace.com/smysecure/catid.html?id=14580 - http://www.debian.org/security/2006/dsa-10
bilities/16931 - http://www.securityspace.com/smysecure/catid.html?id=14580 - http://www.debian.org/security/2006/dsa-1082 - http://www.securityfocus.com/bid/10892 - https://bugzilla.fedora.us/show_bug.cgi?id=2336 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127921 - http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml - http://www.debian.org/security/2006/dsa-1070 - http://secunia.com/advisories/20162 - http://www.trustix.net/errata/2004/0041/ - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - http://www.redhat.com/support/errata/RHSA-2004-505.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade
/support/errata/RHSA-2004-505.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10665 - http://secunia.com/advisories/20202 - http://www.redhat.com/support/errata/RHSA-2004-504.html - http://secunia.com/advisories/20338
CVE ID: CVE-2004-0686 State: PUBLISHED Published: 2004-07-23T04:00:00 Last Updated: 2024-08-08T00:24:27.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.org/errata/2004/0039/ - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000851 - http://www.redhat.com/support/errata/RHSA-2004-259.html - http://marc.info/?l=bugtraq&m=109052891507263&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000854 - http://marc.inf
fo/?l=bugtraq&m=109052891507263&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000854 - http://marc.info/?l=bugtraq&m=109051533021376&w=2 - http://www.novell.com/linux/security/advisories/2004_22_samba.html - http://marc.info/?l=bugtraq&m=109051340810458&w=2 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071 - http://marc.info/?l=bugtraq&m=109785827607823&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16786 - http://marc.info/?l=bugtraq&m=109094272328981&w=2 - http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1 - http://sunsolve.sun.com/search/document.do?assetkey
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10461
CVE ID: CVE-2004-0687 State: PUBLISHED Published: 2004-09-24T00:00:00 Last Updated: 2024-08-08T00:24:27.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-004.html - https://usn.ubuntu.com/27-1/ - http://www.vupen.com/english/advisories/2006/1914 - http://www.gentoo.org/security/en/glsa/glsa-200409-34.xml - http://www.kb.cert.org/
n.com/english/advisories/2006/1914 - http://www.gentoo.org/security/en/glsa/glsa-200409-34.xml - http://www.kb.cert.org/vuls/id/882750 - http://www.us-cert.gov/cas/techalerts/TA05-136A.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:098 - http://www.securityfocus.com/archive/1/434715/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2004-537.html - http://marc.info/?l=bugtraq&m=109530851323415&w=2 - http://www.debian.org/security/2004/dsa-560 - http://scary.beasts.org/security/CESA-2004-003.txt - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000924 - http://www.novell.com/linux/
2005/May/msg00001.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000924 - http://www.novell.com/linux/security/advisories/2004_34_xfree86_libs_xshared.html - http://www.securityfocus.com/bid/11196 - http://www.gentoo.org/security/en/glsa/glsa-200502-07.xml - http://ftp.x.org/pub/X11R6.8.0/patches/README.xorg-CAN-2004-0687-0688.patch - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html - http://secunia.com/advisories/20235 - http://www.securityfocus.com/archive/1/434715/100/0/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57653-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9187 -
o?assetkey=1-26-57653-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17414 - http://packetstormsecurity.com/files/170620/Solaris-10-dtprintinfo-libXm-libXpm-Security-Issues.html
CVE ID: CVE-2004-0688 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:24:27.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/537878 - http://www.redhat.com/support/errata/RHSA-2005-004.html - https://usn.ubuntu.com/27-1/ - http://www.vupen.com/english/advisories/2006/1914 - http://www
rrata/RHSA-2005-004.html - https://usn.ubuntu.com/27-1/ - http://www.vupen.com/english/advisories/2006/1914 - http://www.gentoo.org/security/en/glsa/glsa-200409-34.xml - http://www.us-cert.gov/cas/techalerts/TA05-136A.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:098 - http://www.securityfocus.com/archive/1/434715/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2004-537.html - http://marc.info/?l=bugtraq&m=109530851323415&w=2 - http://www.debian.org/security/2004/dsa-560 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11796 - http://scary.beasts.org/security/CESA-2004-003.txt - http://lists.apple.com/archives/security-a
tre.oval%3Adef%3A11796 - http://scary.beasts.org/security/CESA-2004-003.txt - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000924 - http://www.novell.com/linux/security/advisories/2004_34_xfree86_libs_xshared.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17416 - http://www.securityfocus.com/bid/11196 - http://www.gentoo.org/security/en/glsa/glsa-200502-07.xml - http://ftp.x.org/pub/X11R6.8.0/patches/README.xorg-CAN-2004-0687-0688.patch - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html - http://secunia.com/advisories/20235 - http://www.securityfocus.com/archiv
a-legacy-announce/2006-January/msg00001.html - http://secunia.com/advisories/20235 - http://www.securityfocus.com/archive/1/434715/100/0/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57653-1
CVE ID: CVE-2004-0689 State: PUBLISHED Published: 2004-08-19T04:00:00 Last Updated: 2024-08-08T00:24:27.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9334 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864 - http://secunia.com/advisories/12276/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/16963 - http://www.debian.org/security/2004/dsa
advisories/12276/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/16963 - http://www.debian.org/security/2004/dsa-539 - http://security.gentoo.org/glsa/glsa-200408-13.xml - http://marc.info/?l=bugtraq&m=109225538901170&w=2 - http://www.kde.org/info/security/advisory-20040811-1.txt
CVE ID: CVE-2004-0690 State: PUBLISHED Published: 2004-09-14T04:00:00 Last Updated: 2024-08-08T00:24:27.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP files in the /tmp directory. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16962 - http://secunia.com/advisories/12276 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261386 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:086 - http://www.kde.org/info/security
port.cgi?bug=261386 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:086 - http://www.kde.org/info/security/advisory-20040811-2.txt - http://www.kb.cert.org/vuls/id/330638 - http://www.securityfocus.com/bid/10924 - http://security.gentoo.org/glsa/glsa-200408-13.xml - http://marc.info/?l=bugtraq&m=109225538901170&w=2
CVE ID: CVE-2004-0691 State: PUBLISHED Published: 2004-08-25T04:00:00 Last Updated: 2024-08-08T00:24:27.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9485 - http://security.gentoo.org/glsa/glsa-200408-20.xml - http://www.novell.com/linux/security/advisories/2004_27_qt3.html - http://www.redhat.com/support/errata/RHSA-2004-
xml - http://www.novell.com/linux/security/advisories/2004_27_qt3.html - http://www.redhat.com/support/errata/RHSA-2004-414.html - http://www.debian.org/security/2004/dsa-542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17040 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1 - http://marc.info/?l=bugtraq&m=109295309008309&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:085
CVE ID: CVE-2004-0692 State: PUBLISHED Published: 2004-08-25T04:00:00 Last Updated: 2024-08-08T00:24:27.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XPM parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0693. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200408-20.xml - http://www.novell.com/linux/security/advisories/2004_27_qt3.html - http://www.redhat.com/support/errata/RHSA-2004-414.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/1704
ml - http://www.redhat.com/support/errata/RHSA-2004-414.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17041 - http://www.debian.org/security/2004/dsa-542 - http://marc.info/?l=bugtraq&m=110979666528890&w=2 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10327 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:085
CVE ID: CVE-2004-0693 State: PUBLISHED Published: 2004-08-25T04:00:00 Last Updated: 2024-08-08T00:24:27.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GIF parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0692. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200408-20.xml - http://www.novell.com/linux/security/advisories/2004_27_qt3.html - http://www.redhat.com/support/errata/RHSA-2004-414.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/1704
ml - http://www.redhat.com/support/errata/RHSA-2004-414.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17042 - http://www.debian.org/security/2004/dsa-542 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10883 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:085
CVE ID: CVE-2004-0694 State: PUBLISHED Published: 2011-02-04T00:00:00 Last Updated: 2024-08-08T00:24:27.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-323.html - https://oval.cisecurity.org/reposito
Container: References: - http://www.redhat.com/support/errata/RHSA-2004-323.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9981 - http://www.redhat.com/support/errata/RHSA-2004-440.html
CVE ID: CVE-2004-0695 State: PUBLISHED Published: 2004-07-16T04:00:00 Last Updated: 2024-08-08T00:24:27.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long FTP command. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2004/a071304-1.txt - ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16686
CVE ID: CVE-2004-0696 State: PUBLISHED Published: 2004-07-16T04:00:00 Last Updated: 2024-08-08T00:24:27.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a "*" (asterisk) character. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2004/a071304-1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16687 - ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt - http://www.securityfocus
RY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt - http://www.securityfocus.com/bid/10721
CVE ID: CVE-2004-0697 State: PUBLISHED Published: 2004-07-16T04:00:00 Last Updated: 2024-08-08T00:24:27.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and possibly obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2004/a071304-1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16688 - ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt
CVE ID: CVE-2004-0698 State: PUBLISHED Published: 2004-07-16T04:00:00 Last Updated: 2024-08-08T00:24:27.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: 4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2004/a071304-1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16689 - ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt
CVE ID: CVE-2004-0699 State: PUBLISHED Published: 2004-09-14T04:00:00 Last Updated: 2024-08-08T00:24:27.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data. Additional Analyst Notes: - CVE Program Container: References: - http://www.checkpoint.com/techsupport/alerts/asn1.html - http://securitytracker.com/alerts/2004/Jul/1010799.html - http://www.kb.cert.org/vuls/id/435358 - http://www.osvdb.org/displayvuln.php?osvdb_id=
om/alerts/2004/Jul/1010799.html - http://www.kb.cert.org/vuls/id/435358 - http://www.osvdb.org/displayvuln.php?osvdb_id=8290 - http://www.securityfocus.com/bid/10820 - http://secunia.com/advisories/12177/ - http://xforce.iss.net/xforce/alerts/id/178 - http://www.ciac.org/ciac/bulletins/o-190.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/16824