Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-1442 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in db2www CGI interpreter in IBM Net.Data 7 and 7.2 allows remote attackers to inject arbitrary web script or HTML via a macro filename, which is not properly handled by error messages such as "DTWP001E." Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/DMOA-5VNPEL - http://www.securitytracker.com/id?1008845 - http://www.kb.cert.org/vuls/id/197318 - http://secunia.com/advisories/10709/ - http://www.securityfocus.com/bid/9488 - https://excha
b.cert.org/vuls/id/197318 - http://secunia.com/advisories/10709/ - http://www.securityfocus.com/bid/9488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14925 - http://secunia.com/secunia_research/2004-1/advisory/ - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0019.html - http://www.osvdb.org/3712
CVE ID: CVE-2004-1443 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the inline MIME viewer in Horde-IMP (Internet Messaging Program) 3.2.4 and earlier, when used with Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16866 - http://secunia.com/advisories/12202/ - http://cvs.horde.org/diff.php/imp/docs/CHANGES?r1=1.389.2.106&r2=1.389.2.109&t
- http://secunia.com/advisories/12202/ - http://cvs.horde.org/diff.php/imp/docs/CHANGES?r1=1.389.2.106&r2=1.389.2.109&ty=h - http://www.gentoo.org/security/en/glsa/glsa-200408-07.xml
CVE ID: CVE-2004-1444 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via .. (dot dot) sequences in an @@ command in an HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1010415 - http://www.securityfocus.com/bid/10495 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16350 - http://sourceforge.net/tracker/index.php?func=detail&aid=961511&group_id=31577&atid=402788 - http://secunia.com/advisories/11801/ - http://packets
cker/index.php?func=detail&aid=961511&group_id=31577&atid=402788 - http://secunia.com/advisories/11801/ - http://packetstormsecurity.nl/0406-exploits/roundUP.txt - http://www.gentoo.org/security/en/glsa/glsa-200408-09.xml
CVE ID: CVE-2004-1445 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.nessus.org/nessus_2_0.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16768 - http://secunia.com/advisories/12127/ - http://www.gentoo.org/security/en/glsa/glsa-200408-11.xml - http://www.securityfocus.com/bid/10784
CVE ID: CVE-2004-1446 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:24.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in ScreenOS in Juniper Networks NetScreen firewall 3.x through 5.x allows remote attackers to cause a denial of service (device reboot or hang) via a crafted SSH v1 packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/749870 - http://www.juniper.net/support/security/alerts/screenos-sshv1-2.txt - http://www.securityfocus.com/bid/10854 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16876 - http://secunia.com/advisories/12208/
CVE ID: CVE-2004-1447 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jetbox One 2.0.8 and possibly other versions stores passwords in the database in plaintext, which could allow attackers to gain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://echo.or.id/adv/adv03-y3dips-2004.txt - http://www.kb.cert.org/vuls/id/586720 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16898 - http://www.osvdb.org/8325 - http://www.securityfocus.com/bid/10858 - http://www.securityfocus.com/archive/1/370852 - http://secunia.com/advisories/12230
CVE ID: CVE-2004-1448 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:24.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jetbox One 2.0.8 and possibly other versions allow remote attackers with Author privileges in the IMAGES module to upload PHP files and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12230/ - http://www.securityfocus.com/bid/10859 - http://echo.or.id/adv/adv03-y3dips-2004.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16900 - http://www.kb.cert.org/vuls/id/417408 - http://www.securityfocus.com/archive/1/370852
CVE ID: CVE-2004-1449 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of files on a user's hard drive by obscuring a file upload control and tricking the user into dragging text into that control. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:082 - http://bugzilla.mozilla.org/show_bug.cgi?id=206859#c0
CVE ID: CVE-2004-1450 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in LiveConnect in Mozilla 1.7 beta allows remote attackers to read arbitrary files in known locations. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/projects/security/known-vulnerabilities.html - http://bugzilla.mozilla.org/show_bug.cgi?id=239122
CVE ID: CVE-2004-1451 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla before 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote attackers to trick users into clicking on unknown or untrusted sites and facilitate phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10419/ - http://www.mozilla.org/projects/security/known-vulnerabilities.html - http://bugzilla.mozilla.org/show_bug.cgi?id=228176
CVE ID: CVE-2004-1452 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16993 - http://www.gentoo.org/security/en/glsa/glsa-200408-15.xml - http://secunia.com/advisories/12296/
CVE ID: CVE-2004-1453 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=59526 - http://www.gentoo.org/security/en/glsa/glsa-200408-16.xml - http://www.redhat.com/support/errata/RHSA-2005-261.html - http://www.redhat.com/support/errata/RHSA-
lsa-200408-16.xml - http://www.redhat.com/support/errata/RHSA-2005-261.html - http://www.redhat.com/support/errata/RHSA-2005-256.html - http://secunia.com/advisories/12306 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10762 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17006 - http://www.securityfocus.com/bid/10963
CVE ID: CVE-2004-1454 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:24.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.0S, 12.2, and 12.3, with Open Shortest Path First (OSPF) enabled, allows remote attackers to cause a denial of service (device reload) via a malformed OSPF packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/o-199.shtml - http://www.cisco.com/warp/public/707/cisco-sa-20040818-ospf.shtml - http://www.kb.cert.org/vuls/id/989406 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17033 - http://secunia.com/advisories/12322 - http://www.securityfocus.com/bid/1
nge.xforce.ibmcloud.com/vulnerabilities/17033 - http://secunia.com/advisories/12322 - http://www.securityfocus.com/bid/10971
CVE ID: CVE-2004-1455 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12194/ - http://marc.info/?l=bugtraq&m=109284737628045&w=2 - http://open-security.org/advisories/6 - http://www.securityfocus.com/bid/10890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16930 - http://www.gentoo.org/security/en/glsa/glsa-200408-
10890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16930 - http://www.gentoo.org/security/en/glsa/glsa-200408-18.xml
CVE ID: CVE-2004-1456 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10878 - http://www.kb.cert.org/vuls/id/770816 - http://www.osvdb.org/8373 - http://www.cvstrac.org/cvstrac/chngview?cn=316 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16929 - http://www.cvstrac.org/cvstrac/tktview?tn=339 - http://marc.info/?l=bugtraq&m=109173359428253&w=2 - http://secunia.com/advisories/12090/
CVE ID: CVE-2004-1457 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Virtual Private Network (VPN) capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of service (ABEND in IKE.NLM) via a malformed IKE packet, as sent by the Striker ISAKMP Protocol Test Suite. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12067/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/16697 - http://www.kb.cert.org/vuls/id/432097 - http://www.securityfocus.com/bid/10727 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/100935
vuls/id/432097 - http://www.securityfocus.com/bid/10727 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10093576.htm
CVE ID: CVE-2004-1458 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CSAdmin web administration interface for Cisco Secure Access Control Server (ACS) 3.2(2) build 15 allows remote attackers to cause a denial of service (hang) via a flood of TCP connections to port 2002. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17114 - http://osvdb.org/9182 - http://secunia.com/advisories/12386/ - http://www.ciac.org/ciac/bulletins/o-203.shtml - http://www.securityfocus.com/bid/11047 - http://www.cisco.com/warp/public/707/cisco-sa-
org/ciac/bulletins/o-203.shtml - http://www.securityfocus.com/bid/11047 - http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml
CVE ID: CVE-2004-1459 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure Access Control Server (ACS) 3.2, when configured as a Light Extensible Authentication Protocol (LEAP) RADIUS proxy, allows remote attackers to cause a denial of service (device crash) via certain LEAP authentication requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17116 - http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml
CVE ID: CVE-2004-1460 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure Access Control Server (ACS) 3.2(3) and earlier, when configured with an anonymous bind in Novell Directory Services (NDS) and authenticating NDS users with NDS, allows remote attackers to gain unauthorized access to AAA clients via a blank password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17117 - http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml
CVE ID: CVE-2004-1461 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure Access Control Server (ACS) 3.2(3) and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers to bypass authentication by connecting to that port from the same IP address. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17118 - http://www.securityfocus.com/bid/11047 - http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml
CVE ID: CVE-2004-1462 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized access to administrator functions such as (1) revert and (2) delete. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/project/shownotes.php?group_id=8482&release_id=254801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16833 - http://www.gentoo.org/security/en/glsa/glsa-200408-25.xml - http://www.securityfocus.com/bid/10805 - http://www.osvdb.org/displayvuln.php?osvdb_id=8194
CVE ID: CVE-2004-1463 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:24.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/displayvuln.php?osvdb_id=8195 - http://www.securityfocus.com/bid/10801 - http://sourceforge.net/project/shownotes.php?group_id=8482&release_id=254801 - http://www.gentoo.org/security/en/glsa/glsa-200408-25.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/16832
CVE ID: CVE-2004-1464 State: PUBLISHED Published: 2005-02-13T05:00:00.000Z Last Updated: 2025-10-22T00:05:57.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17131 - http://securitytracker.com/id?1011079 - http://www.kb.cert.org/vuls/id/384230 - http://secunia.com/advisories/12395/ - http://www.cisco.com/warp/public/707/cisco-sa-20040827-telne
org/vuls/id/384230 - http://secunia.com/advisories/12395/ - http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml - http://www.securityfocus.com/bid/11060
CVE ID: CVE-2004-1465 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:24.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109416099301369&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17197 - http://www.securityfocus.com/bid/11092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17192 - http://www.winzip.com/wz90sr1.htm - http://securitytracker.com/id?1011132 - http://www.ciac.org/ciac/bul
ilities/17192 - http://www.winzip.com/wz90sr1.htm - http://securitytracker.com/id?1011132 - http://www.ciac.org/ciac/bulletins/o-211.shtml
CVE ID: CVE-2004-1466 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 seconds after they have been uploaded using save_photos.php, which allows remote attackers to upload and execute execute arbitrary scripts before they are deleted, if the temporary directory is under the web root. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17021 - http://archives.neohapsis.com/archives
ocus.com/bid/10968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17021 - http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0757.html - http://www.gentoo.org/security/en/glsa/glsa-200409-05.xml - http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=134&mode=thread&order=0&thold=0
CVE ID: CVE-2004-1467 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.0.00.003 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) date or search text field in the calendar module, (2) Field parameter, Filter parameter, QField parameter, Start parameter or Search field in the address module, (3) Subject field in the message module or (4) Subject field in the Ticket module. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200409-06.xml - htt
al Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200409-06.xml - http://www.securityfocus.com/bid/11013 - http://sourceforge.net/forum/forum.php?forum_id=401807 - http://www.securityfocus.com/archive/1/372603 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17078
CVE ID: CVE-2004-1468 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11122 - http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/77_e.html - http://secunia.com/advisories/12488/ - http://www.gentoo.org/security/en/glsa/glsa-200409-15.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17293
CVE ID: CVE-2004-1469 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the log function in SUS 2.0.2, and other versions before 2.0.6, allows local users to execute arbitrary code via format string specifiers in a command line argument that is passed directly to syslog. Additional Analyst Notes: - CVE Program Container: References: - http://security.lss.hr/index.php?page=details&ID=LSS-2004-09-01 - http://www.gentoo.org/security/en/glsa/glsa-200409-17.xml - http://pdg.uow.edu.au/sus/CHANGES - http://marc.info/?l=bugtraq&m=109517782910407&w=2 - http://www.securityfoc
-17.xml - http://pdg.uow.edu.au/sus/CHANGES - http://marc.info/?l=bugtraq&m=109517782910407&w=2 - http://www.securityfocus.com/bid/11176 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17361
CVE ID: CVE-2004-1470 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17364 - http://www.securityfocus.com/bid/11180 - http://www.gentoo.org/security/en/glsa/glsa-200409-23.xml - http://marc.info/?l=bugtraq&m=109518773223511&w=2 - http://www.snipsnap.org/space/start
CVE ID: CVE-2004-1471 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line. Additional Analyst Notes: - CVE Program Container: References: - http://security.e-matters.de/advisories/092004.html - http://www.securityfocus.com/bid/10499 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:14.cvs.asc - https://excha
securityfocus.com/bid/10499 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:14.cvs.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/16365 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html
CVE ID: CVE-2004-1472 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service (device freeze) via a fast UDP port scan on the WAN interface. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12635 - http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html - http://marc.info/?l=bugtraq&m=109588376426070&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17469 - http://www.kb.cert.org/vuls/
ugtraq&m=109588376426070&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17469 - http://www.kb.cert.org/vuls/id/441078 - http://www.securityfocus.com/bid/11237 - http://www.osvdb.org/10204