Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2004-0943 State: REJECTED Published: 2005-10-27T04:00:00Z Last Updated: 2024-09-16T18:55:44.074Z Description: No description available.
CVE ID: CVE-2004-0944 State: PUBLISHED Published: 2005-02-28T05:00:00 Last Updated: 2024-08-08T00:31:48.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 generates easily predictable web session IDs, which allows remote attackers to hijack other sessions via the parentsessionid cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.corsaire.com/advisories/c040817-002.txt - http://www.niscc.gov.uk/niscc/docs/re-20050228-00178.pdf?lang=en - http://www.mitel.com/DocController?documentId=14223
CVE ID: CVE-2004-0945 State: PUBLISHED Published: 2005-02-28T05:00:00 Last Updated: 2024-08-08T00:31:48.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 allows remote authenticated users to cause a denial of service (resource exhaustion) via a large number of active sessions, which exceeds ICP's maximum. Additional Analyst Notes: - CVE Program Container: References: - http://www.niscc.gov.uk/niscc/docs/re-20050228-00178.pdf?lang=en - http://www.corsaire.com/advisories/c040817-003.txt - http://www.mitel.com/DocController?documentId=14223
CVE ID: CVE-2004-0946 State: PUBLISHED Published: 2004-12-22T05:00:00 Last Updated: 2024-08-08T00:31:48.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=72113 - http://www.redhat.com/support/errata/RHSA-2005-014.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18455 - http://www.kb.cert.org/vuls/id/698302 - http://
-014.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18455 - http://www.kb.cert.org/vuls/id/698302 - http://www.redhat.com/support/errata/RHSA-2004-583.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10464 - http://www.securityfocus.com/archive/1/426072/30/6740/threaded - http://secunia.com/advisories/13440/ - http://www.gentoo.org/security/en/glsa/glsa-200412-08.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2005:005 - http://www.securityfocus.com/bid/11911
CVE ID: CVE-2004-0947 State: PUBLISHED Published: 2004-11-24T05:00:00 Last Updated: 2024-08-08T00:31:48.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-652 - http://www.securityfocus.com/bid/11665 - http://www.redhat.com/support/errata/RHSA-2005-007.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18044 - http://www.gentoo.org/security/en/glsa/glsa-200411-29.xml - http://lwn.net/Articles/121827/
CVE ID: CVE-2004-0948 State: REJECTED Published: 2005-02-06T05:00:00Z Last Updated: 2024-09-16T23:31:07.546Z Description: No description available.
CVE ID: CVE-2004-0949 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:31:48.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or (2) raise a counter value to an arbitrary number by sending the first part of the fragmented packet multiple times. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://www.securityfocus.com/bid/11695 - http://www.debian.org
iner: References: - http://secunia.com/advisories/20163 - http://www.securityfocus.com/bid/11695 - http://www.debian.org/security/2006/dsa-1082 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 - http://marc.info/?l=bugtraq&m=110072140811965&w=2 - https://bugzilla.fedora.us/show_bug.cgi?id=2336 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10360 - https://www.ubuntu.com/usn/usn-30-1/ - http://security.e-matters.de/advisories/142004.html - http://www.debian.org/security/2006/dsa-1070 - http://www.redhat.com/support/errata/RHSA-2004-537.html - http://secunia.com/advisories/20162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18
rrata/RHSA-2004-537.html - http://secunia.com/advisories/20162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18137 - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - http://www.trustix.org/errata/2004/0061/ - http://www.redhat.com/support/errata/RHSA-2004-505.html - http://secunia.com/advisories/20202 - http://www.redhat.com/support/errata/RHSA-2004-504.html - http://secunia.com/advisories/13232/ - http://secunia.com/advisories/20338
CVE ID: CVE-2004-0950 State: PUBLISHED Published: 2004-11-24T05:00:00 Last Updated: 2024-08-08T00:31:48.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetOp Host before 7.65 build 2004278 allows remote attackers to obtain sensitive hostname, username and local IP address information via (1) a NetOp HELO request, or (2) when responses are disabled, a "custom" HELO request. Additional Analyst Notes: - CVE Program Container: References: - http://www.corsaire.com/advisories/c040619-001.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/18171 - http://msgs.securepoint.com/cgi-bin/get/bugtraq0411/213.html - http://www.securityfocus.com/bid/11710
CVE ID: CVE-2004-0951 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-08T00:31:48.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.corsaire.com/advisories/c041123-001.txt - http://www.securityfocus.com/bid/14568 - http://secunia.com/advisories/16456/ - http://securitytracker.com/id?1014711 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21858
CVE ID: CVE-2004-0952 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-08T00:31:48.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add_new_client command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112422597529112&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21857 - http://m
ch/definition/oval%3Aorg.mitre.oval%3Adef%3A5775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21857 - http://marc.info/?l=bugtraq&m=112420609211136&w=2 - http://secunia.com/advisories/16456/ - http://securitytracker.com/id?1014711 - http://marc.info/?l=bugtraq&m=112422597529112&w=2
CVE ID: CVE-2004-0953 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:31:48.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the C2S module in the open source Jabber 2.x server (Jabberd) allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long username. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110144303826709&w=2 - http://www.securityfocus.com/bid/11741 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029346.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18238
CVE ID: CVE-2004-0954 State: REJECTED Published: 2004-10-21T04:00:00 Last Updated: 2005-02-06T10:00:00 Description: No description available.
CVE ID: CVE-2004-0955 State: REJECTED Published: 2004-11-04T05:00:00 Last Updated: 2005-02-06T10:00:00 Description: No description available.
CVE ID: CVE-2004-0956 State: PUBLISHED Published: 2004-12-05T05:00:00 Last Updated: 2024-08-08T00:31:48.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.net/errata/2004/0054/ - http://lists.mysql.com/packagers/202 - http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17768 - http://www.novell.com/linux/security/advisories/2004_01_sr.html - http://bugs.mysql.com
loud.com/vulnerabilities/17768 - http://www.novell.com/linux/security/advisories/2004_01_sr.html - http://bugs.mysql.com/bug.php?id=3870
CVE ID: CVE-2004-0957 State: PUBLISHED Published: 2004-10-21T04:00:00 Last Updated: 2024-08-08T00:31:48.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17783 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947 - http://www.redhat.com/support/errata/RHSA-2004-611.html - http://www.debian.
.com.br/atualizacoes/?id=a&anuncio=000947 - http://www.redhat.com/support/errata/RHSA-2004-611.html - http://www.debian.org/security/2005/dsa-707 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:070 - https://www.ubuntu.com/usn/usn-32-1/ - http://www.redhat.com/support/errata/RHSA-2004-597.html - http://www.ciac.org/ciac/bulletins/p-018.shtml
CVE ID: CVE-2004-0958 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:31:48.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0053.html - http://marc.info/?l=bugtraq&m=109527531130492&w=2 - http://secunia.com/advisories/12560/ - http://securitytracker.com/id?1011279 - https://bugzilla.fedora.u
531130492&w=2 - http://secunia.com/advisories/12560/ - http://securitytracker.com/id?1011279 - https://bugzilla.fedora.us/show_bug.cgi?id=2344 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17393 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10863 - http://www.redhat.com/support/errata/RHSA-2004-687.html
CVE ID: CVE-2004-0959 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:31:48.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that causes the "$_FILES" array to be modified. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10961 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17392 - http://securitytracker.com/id?1011307 - http://secunia.com/advisories/12560/ - http://marc.info/?l=bugtraq&m=109534848430404&w=2 -
ritytracker.com/id?1011307 - http://secunia.com/advisories/12560/ - http://marc.info/?l=bugtraq&m=109534848430404&w=2 - https://bugzilla.fedora.us/show_bug.cgi?id=2344 - http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0054.html - http://www.redhat.com/support/errata/RHSA-2004-687.html
CVE ID: CVE-2004-0960 State: PUBLISHED Published: 2004-10-20T04:00:00 Last Updated: 2024-08-08T00:31:48.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) that cause a memcpy operation with a -1 argument. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200409-29.xml - http://www.securityfocus.com/bid/11222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17440 - http://www.kb.cert.org/vuls/id/541574 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ad
tp://www.kb.cert.org/vuls/id/541574 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11023
CVE ID: CVE-2004-0961 State: PUBLISHED Published: 2004-10-20T04:00:00 Last Updated: 2024-08-08T00:31:48.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (memory exhaustion) via a series of Access-Request packets with (1) Ascend-Send-Secret, (2) Ascend-Recv-Secret, or (3) Tunnel-Password attributes. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200409-29.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10024 - http://www.securityfocus.com/bid/11222 - https://exchange.xforce.ibmcloud.com/vu
n/oval%3Aorg.mitre.oval%3Adef%3A10024 - http://www.securityfocus.com/bid/11222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17440 - http://www.kb.cert.org/vuls/id/541574
CVE ID: CVE-2004-0962 State: PUBLISHED Published: 2004-10-28T04:00:00Z Last Updated: 2024-09-17T03:38:34.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Remote Desktop Client 1.2.4 executes a GUI application as root when it is started by an Apple Remote Desktop Administrator application, which allows remote authenticated users to execute arbitrary code when loginwindow is active via Fast User Switching. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2004/Oct/msg00002.html
CVE ID: CVE-2004-0963 State: PUBLISHED Published: 2004-10-20T04:00:00 Last Updated: 2024-08-08T00:38:59.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause a denial of service (application exception) and possibly execute arbitrary code in winword.exe via certain unexpected values in a .doc file, including (1) an offset that triggers an out-of-bounds memory access, (2) a certain value that causes a large memory copy as triggered by an integer conversion error, and other values. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microso
onversion error, and other values. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-023 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2216 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A420 - http://marc.info/?l=bugtraq&m=109716247230733&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2105 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1795 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17635
CVE ID: CVE-2004-0964 State: PUBLISHED Published: 2004-10-20T04:00:00 Last Updated: 2024-08-08T00:38:59.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109638486728548&w=2 - http://www.securityfocus.com/bid/11248 - http://secunia.com/advisories/12656 - http://marc.info/?l=bugtraq&m=109608092609200&w=2 - http://securityreason.com/securityalert/8341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17491
2609200&w=2 - http://securityreason.com/securityalert/8341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17491 - http://www.debian.org/security/2004/dsa-587
CVE ID: CVE-2004-0965 State: PUBLISHED Published: 2004-10-26T04:00:00 Last Updated: 2024-08-08T00:38:59.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17813 - http://www.securityfocus.com/bid/11493 - http://marc.info/?l=bugtraq&m=109837243713696&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval
c.info/?l=bugtraq&m=109837243713696&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5538 - http://www.securityfocus.com/advisories/7351 - http://www.nsfocus.com/english/homepage/research/0402.htm
CVE ID: CVE-2004-0966 State: PUBLISHED Published: 2004-10-20T04:00:00 Last Updated: 2024-08-08T00:38:59.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00000.html - http://marc.info/?l=bugtraq&m=110382652226638&w=2 - http://www.gentoo.org/security/en/glsa/glsa-200410-10.xml - https://exchange.xf
.info/?l=bugtraq&m=110382652226638&w=2 - http://www.gentoo.org/security/en/glsa/glsa-200410-10.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 - http://www.securityfocus.com/bid/11282 - http://www.trustix.org/errata/2004/0050 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136323 - https://www.ubuntu.com/usn/usn-5-1/ - http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:051
CVE ID: CVE-2004-0967 State: PUBLISHED Published: 2004-10-20T04:00:00 Last Updated: 2024-08-08T00:38:59.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10284 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 - http://secunia.com/advisories/19799 - http://www.trustix
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 - http://secunia.com/advisories/19799 - http://www.trustix.org/errata/2004/0050 - http://secunia.com/advisories/20056 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136321 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.23/SCOSA-2006.23.txt - http://secunia.com/advisories/16997 - http://www.redhat.com/support/errata/RHSA-2005-081.html - http://secunia.com/advisories/17135 - https://www.ubuntu.com/usn/usn-3-1/ - http://www.securityfocus.com/bid/11285 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.19/SCOSA-2006.19.txt
CVE ID: CVE-2004-0968 State: PUBLISHED Published: 2004-10-20T04:00:00 Last Updated: 2024-08-08T00:38:58.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-636 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9523 - http://www.redhat.com/support/errata/RHSA-2005-261.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 - http://www.securityfocus.com/bid/11286 - https://www.ubuntu.com/usn/usn-4-1/ - ht
e.ibmcloud.com/vulnerabilities/17583 - http://www.securityfocus.com/bid/11286 - https://www.ubuntu.com/usn/usn-4-1/ - http://security.gentoo.org/glsa/glsa-200410-19.xml - http://www.trustix.org/errata/2004/0050 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136318 - http://www.redhat.com/support/errata/RHSA-2004-586.html
CVE ID: CVE-2004-0969 State: PUBLISHED Published: 2004-10-20T04:00:00 Last Updated: 2024-08-08T00:38:59.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200411-15.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 - http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:038 - http://www.securityfocus.com/bid/11287 - http:
83 - http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:038 - http://www.securityfocus.com/bid/11287 - http://www.trustix.org/errata/2004/0050 - http://secunia.com/advisories/18764 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136313
CVE ID: CVE-2004-0970 State: PUBLISHED Published: 2004-10-20T04:00:00 Last Updated: 2024-08-08T00:38:59.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 - http://www.securityfocus.com/bid/11288 - http://www.trustix.org/errata/2004/0050 - http://www.debian.org/security/2004/dsa-588 - http://secunia.com/advisories
- http://www.trustix.org/errata/2004/0050 - http://www.debian.org/security/2004/dsa-588 - http://secunia.com/advisories/13131 - http://www.zataz.net/adviso/ncompress-09052005.txt