Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-1096 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13038/ - http://www.mandriva.com/security/advisories?name=MDKSA-2004:118 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17761 - http
mandriva.com/security/advisories?name=MDKSA-2004:118 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17761 - http://www.kb.cert.org/vuls/id/492545 - http://www.securityfocus.com/bid/11448 - http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true - http://www.gentoo.org/security/en/glsa/glsa-200410-31.xml
CVE ID: CVE-2004-1097 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17934 - http://www.gentoo.org/security/en/glsa/glsa-200411-02.xml - http://www.securityfocus.com/bid/11574 - http://bugs.
7934 - http://www.gentoo.org/security/en/glsa/glsa-200411-02.xml - http://www.securityfocus.com/bid/11574 - http://bugs.gentoo.org/show_bug.cgi?id=67667
CVE ID: CVE-2004-1098 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the Content-Type header. Additional Analyst Notes: - CVE Program Container: References: - http://lists.roaringpenguin.com/pipermail/mimedefang/2004-October/024959.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17940 - http://www.securityfocus.com/bid/11563 - http://www.gentoo.org
ps://exchange.xforce.ibmcloud.com/vulnerabilities/17940 - http://www.securityfocus.com/bid/11563 - http://www.gentoo.org/security/en/glsa/glsa-200411-06.xml
CVE ID: CVE-2004-1099 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.3.1, when the EAP-TLS protocol is enabled, does not properly handle expired or untrusted certificates, which allows remote attackers to bypass authentication and gain unauthorized access via a "cryptographically correct" certificate with valid fields such as the username. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20041102
Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20041102-acs-eap-tls.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17936 - http://www.securityfocus.com/bid/11577 - http://www.ciac.org/ciac/bulletins/p-028.shtml
CVE ID: CVE-2004-1100 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to execute arbitrary web script or HTML via the append parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.procheckup.com/security_info/vuln_pr0410.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17953 - http://www.kb.cert.org/vuls/id/107998 - http://www.securityfocus.com/bid/11596
CVE ID: CVE-2004-1101 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash), leak sensitive pathname information in the resulting error message, and execute a cross-site scripting (XSS) attack via an HTTP request that contains a / (backslash) and arbitrary webscript before the requested file, which leaks the pathname and does not quote the script in the resulting Visual Basic error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.proch
resulting Visual Basic error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.procheckup.com/security_info/vuln_pr0411.html - http://www.securityfocus.com/bid/11598 - http://www.kb.cert.org/vuls/id/596046 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17951
CVE ID: CVE-2004-1102 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested file exists or not, which allows remote attackers to gain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11599 - http://www.procheckup.com/security_info/vuln_pr0408.html - http://www.kb.cert.org/vuls/id/306086 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17954
CVE ID: CVE-2004-1103 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to gain sensitive information via the debug parameter, which reveals information such as the path to the web root and the web server version. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17952 - http://www.procheckup.com/security_info/vuln_pr0409.html - http://www.securityfocus.com/bid/11595 - http://www.kb.cert.org/vuls/id/858726
CVE ID: CVE-2004-1104 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor (a) element with an empty "href" attribute, and a FORM whose action points to a malicious URL, and an INPUT submit element that is modified to look like a legitimate URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11273 - http://www.securityfoc
ional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11273 - http://www.securityfocus.com/archive/1/379903 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17938 - http://www.kb.cert.org/vuls/id/702086 - http://www.securityfocus.com/bid/11565 - http://www.securityfocus.com/archive/1/425386/100/0/threaded - http://www.securityfocus.com/archive/1/425883/100/0/threaded
CVE ID: CVE-2004-1105 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:01.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11623 - http://www.kb.cert.org/vuls/id/830214 - http://www.nii.co.in/vuln/contivity.html - http://www.kb.cert.org/vuls/id/CRDY-626N7F - http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0291.html - https://exchange.xforce.ibmclou
/CRDY-626N7F - http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0291.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17988
CVE ID: CVE-2004-1106 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Gallery 1.4.4-pl3 and earlier allows remote attackers to execute arbitrary web script or HTML via "specially formed URLs," possibly via the include parameter in index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17948 - http://www.securityfocus.com/bid/11602 - http://www.debian.org/security/2005/dsa-642 - http://www.gentoo.org/security/en/glsa/glsa-200411-10.xml - http://gallery.menalto.com/modules.php?op=m
y/2005/dsa-642 - http://www.gentoo.org/security/en/glsa/glsa-200411-10.xml - http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=142&mode=thread&order=0&thold=0 - http://g3cko.info/gallery2-4.patch
CVE ID: CVE-2004-1107 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13108/ - http://www.securityfocus.com/bid/11616 - http://bugs.gentoo.org/show_bug.cgi?id=69147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17986 - http://www.gentoo.org/security/en/glsa/glsa-200411-13.xml
CVE ID: CVE-2004-1108 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: qpkg in Gentoolkit 0.2.0_pre10 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13108/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/17968 - http://www.securityfocus.com/bid/11617 - http://www.gentoo.org/security/en/glsa/glsa-200411-13.xml - http://bugs.gentoo.org/show_bug.cgi?id=68846
CVE ID: CVE-2004-1109 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service (CPU consumption and system freeze from infinite loop) via a (1) TCP, (2) UDP, or (3) ICMP packet with a zero length IP Option field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17992 - http://www.kerio.com/security_advisory.html - http://www.securityfocus.com/bid/11639 - http://www.eeye.com/html/research/advisories/AD20041109.html
CVE ID: CVE-2004-1110 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink attack on the epson temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200411-17.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/18011 - http://bugs.gentoo.org/show_bug.cgi?id=70310 - http://www.securityfocus.com/bid/11640
CVE ID: CVE-2004-1111 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5632 -
Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5632 - http://www.us-cert.gov/cas/techalerts/TA04-316A.html - http://www.cisco.com/warp/public/707/cisco-sa-20041110-dhcp.shtml - http://www.kb.cert.org/vuls/id/630104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18021 - http://www.ciac.org/ciac/bulletins/p-034.shtml
CVE ID: CVE-2004-1112 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks within the five minute timeout period. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11659 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18037 - http://www.cisco.com/warp/public/707/cisco-sa-200411
1659 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18037 - http://www.cisco.com/warp/public/707/cisco-sa-20041111-csa.shtml - http://www.ciac.org/ciac/bulletins/p-036.shtml
CVE ID: CVE-2004-1113 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SQLgrey Postfix greylisting service before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) sender or (2) recipient e-mail addresses. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11633 - http://www.trustix.org/errata/2004/0058/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/17998 - http://sourceforge.net/project/shownotes.php?release_id=281256 - http://secunia.com/advisories/13135/
CVE ID: CVE-2004-1114 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username, a different vulnerability than CVE-2004-1777. Additional Analyst Notes: - CVE Program Container: References: - http://www.skype.com/products/skype/windows/changelog.html - http://www.skype.com/security/ssa-2004-02.html - http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028852.html - http://marc.info/?l=bugtraq&m=1100
html - http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028852.html - http://marc.info/?l=bugtraq&m=110062240706017&w=2 - http://marc.info/?l=bugtraq&m=110067029422696&w=2 - http://www.securityfocus.com/bid/11682 - http://www.osvdb.org/11786 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18063 - http://secunia.com/advisories/13191
CVE ID: CVE-2004-1115 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: The init scripts in Search for Extraterrestrial Intelligence (SETI) project 3.08-r3 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200411-26.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/18149
CVE ID: CVE-2004-1116 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: The init scripts in Great Internet Mersenne Prime Search (GIMPS) 23.9 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200411-26.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/18149
CVE ID: CVE-2004-1117 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: The init scripts in ChessBrain 20407 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200411-26.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/18149
CVE ID: CVE-2004-1118 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11721 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029243.html - http://marc.info/?l=bugtraq&m=110114233323417&w=2 - http://lists.grok.org.uk/pipermai
losure/2004-November/029243.html - http://marc.info/?l=bugtraq&m=110114233323417&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029244.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18190
CVE ID: CVE-2004-1119 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18197 - http://secunia.com/advisories/13269/ - http://marc.info/?l=bugtraq&m=110123330404482&w=2 - http://marc.info/?l=bugtraq&m=110146036300803&w=2 - http://www.securityfocus.com/bid/11730 - http://marc.info/?l=ntbugtraq&m=110
arc.info/?l=bugtraq&m=110146036300803&w=2 - http://www.securityfocus.com/bid/11730 - http://marc.info/?l=ntbugtraq&m=110135574326217&w=2 - http://www.kb.cert.org/vuls/id/986504 - http://marc.info/?l=ntbugtraq&m=110126352412395&w=2 - http://archives.neohapsis.com/archives/bugtraq/2004-11/0369.html - http://www.security-assessment.com/Papers/Winamp_IN_CDDA_Buffer_Overflow.pdf
CVE ID: CVE-2004-1120 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and earlier allow remote servers to execute arbitrary code via a long Location header. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=70090 - http://www.gentoo.org/security/en/glsa/glsa-200411-31.xml - http://www.debian.org/security/2005/dsa-663 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18210 - http://www.securityfocus.com/b
.org/security/2005/dsa-663 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18210 - http://www.securityfocus.com/bid/11734 - http://www.securityfocus.com/archive/1/382219
CVE ID: CVE-2004-1121 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T00:39:00.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/925430 - http://www.securityfocus.com/bid/11573 - http://secunia.com/advisories/13047/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/17909 - http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html
CVE ID: CVE-2004-1122 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:39:00.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows, aka the "Dialog Box Spoofing Vulnerability," a different vulnerability than CVE-2004-1314. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2004-10/ - http://secunia.com/advisories/12892 - http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html - http://secunia.com/multipl
advisories/12892 - http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html - http://secunia.com/multiple_browsers_dialog_box_spoofing_test/
CVE ID: CVE-2004-1123 State: PUBLISHED Published: 2004-12-05T05:00:00 Last Updated: 2024-08-08T00:39:00.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a DESCRIBE request with a location that contains a null byte. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18357 - http://www.idefense.com/application/poi/display?id=159&type=vulnerabilities
CVE ID: CVE-2004-1124 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-08T00:39:00.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape the chroot jail and conduct unauthorized activities. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.2/SCOSA-2005.2.txt - http://secunia.com/advisories/15339 - http://secunia.com/advisories/13915 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.22/SCOSA-2005.22.txt - http://www.securityfocus.com/bid/12300 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1
5.22/SCOSA-2005.22.txt - http://www.securityfocus.com/bid/12300 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18970
CVE ID: CVE-2004-1125 State: PUBLISHED Published: 2004-12-22T05:00:00 Last Updated: 2024-08-08T00:39:00.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-013.html - http://secunia.com/advisories/17277 -