Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-2696 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation (RMI) over Internet Inter-ORB Protocol (IIOP), does not properly handle when multiple logins for different users coming from the same client, which could cause an "unexpected user identity" to be used in an RMI call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16421 - http://securitytracker.com/id?1010493 - http://www.secu
5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16421 - http://securitytracker.com/id?1010493 - http://www.securityfocus.com/bid/10545 - http://dev2dev.bea.com/pub/advisory/59 - http://www.osvdb.org/7081
CVE ID: CVE-2004-2697 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument (log file). NOTE: this might be related to CVE-2006-5002. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15620 - http://www.osvdb.org/4582 - http://secunia.com/advisories/11200 - http://www.securityfocus.com/bid/9982 - http://www.xfocus.org/exploits/200403/31.html - http://www.securiteam.com/exp
- http://www.securityfocus.com/bid/9982 - http://www.xfocus.org/exploits/200403/31.html - http://www.securiteam.com/exploits/5CP0F0UDFG.html
CVE ID: CVE-2004-2698 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in IMWheel 1.0.0pre11 and earlier, when running with the -k option, allows local users to cause a denial of service (IMWheel crash) and possibly modify arbitrary files via a symlink attack on the imwheel.pid file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17082 - http://securitytracker.com/id?1011049 - http://secunia.com/advisories/12349 - http://www.securityfocus.com/bid/11008 - http://www.caughq.org/advisories/CAU-2004-0002.txt - http:
m/advisories/12349 - http://www.securityfocus.com/bid/11008 - http://www.caughq.org/advisories/CAU-2004-0002.txt - http://imwheel.sourceforge.net/files/DEVELOPMENT.txt - http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0914.html - http://www.osvdb.org/9111
CVE ID: CVE-2004-2699 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: deleteicon.aspx in AspDotNetStorefront 3.3 allows remote attackers to delete arbitrary product images via a modified ProductID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0235.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16377 - http://www.osvdb.org/6958 - http://www.securityfocus.com/archive/1/365559 - http://secunia.com/advisories/11839 - http://www.securityfocus.com/bid/10506 - http://securityreason.com/securityalert
- http://secunia.com/advisories/11839 - http://www.securityfocus.com/bid/10506 - http://securityreason.com/securityalert/3206
CVE ID: CVE-2004-2700 State: PUBLISHED Published: 2007-10-06T21:00:00Z Last Updated: 2024-09-16T16:37:48.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in AspDotNetStorefront 3.3 allows remote authenticated administrators to upload arbitrary files with executable extensions via admin/images.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0230.html - http://www.osvdb.org/6959 - http://secunia.com/advisories/11839
CVE ID: CVE-2004-2701 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in signin.aspx for AspDotNetStorefront 3.3 allows remote attackers to inject arbitrary web script or HTML via the returnurl parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16426 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0129.html - http://www.securityfocus.com/bid/10507 - http://secunia.com/advisories/11839 - http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0229.html
CVE ID: CVE-2004-2702 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login_up.php3 in Plesk 7.0 and 7.1 Reloaded allows remote attackers to inject arbitrary web script or HTML via the login_name parameter. NOTE: this might be the same vector as CVE-2006-6451. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12368 - http://www.securityfocus.com/bid/11024 - http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0554.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17085 - http://www.osvdb.o
hives/fulldisclosure/2004-12/0554.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17085 - http://www.osvdb.org/9149 - http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1031.html - http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1022.html - http://securitytracker.com/id?1011042
CVE ID: CVE-2004-2703 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to bypass scanning by including encrypted data in a mail message, which causes the message to be marked as "Clean" instead of "Encrypted". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18035 - http://www.securityfocus.com/bid/11669 - http://secunia.com/advisories/13160 - http://www.osvdb.org/11602 - ht
s/18035 - http://www.securityfocus.com/bid/11669 - http://secunia.com/advisories/13160 - http://www.osvdb.org/11602 - http://download.mimesweeper.com/www/TechnicalDocumentation/MSWSMTP505UpdateReadMe.htm
CVE ID: CVE-2004-2704 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hastymail 1.0.1 and earlier (stable) and 1.1 and earlier (development) does not send the "attachment" parameter in the Content-Disposition field for attachments, which causes the attachment to be rendered inline by Internet Explorer when the victim clicks the download link, which facilitates cross-site scripting (XSS) and possibly other attacks. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12358 - http://www.securityfocus.com/bid/11022 - http://www.osvdb.org/9131 - http://archi
http://secunia.com/advisories/12358 - http://www.securityfocus.com/bid/11022 - http://www.osvdb.org/9131 - http://archives.neohapsis.com/archives/bugtraq/2004-08/0322.html - http://hastymail.sourceforge.net/security.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/17091 - http://securitytracker.com/id?1011054
CVE ID: CVE-2004-2705 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets. Additional Analyst Notes: - CVE Program Container: References: - http://forums.pvpgn.org/index.php/topic%2C2655.0.html - http://securitytracker.com/id?1011050 - http://www.osvdb.org/9144 - http://secunia.com/advisories/12360 - http://www.securityfocus.com/bid/11035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1
a.com/advisories/12360 - http://www.securityfocus.com/bid/11035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17094
CVE ID: CVE-2004-2706 State: PUBLISHED Published: 2007-10-06T21:00:00Z Last Updated: 2024-09-17T00:55:33.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Gyach Enhanced (Gyach-E) before 1.0.4 allows remote attackers to cause a denial of service (crash) via conference packets with error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/8938 - http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php
CVE ID: CVE-2004-2707 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Gyach Enhanced (Gyach-E) before 1.0.5 have unknown impact and attack vectors related to "several security flaws," probably related to buffer overflows in HTTP server responses. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/8937 - http://securitytracker.com/id?1011058 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17096 - http://www.securityfocus.com/bid/10975 - http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php
CVE ID: CVE-2004-2708 State: PUBLISHED Published: 2007-10-06T21:00:00Z Last Updated: 2024-09-16T18:34:56.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gyach Enhanced (Gyach-E) before 1.0.0 stores passwords in plaintext, which allows attackers to obtain user passwords by reading the configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/8834 - http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php
CVE ID: CVE-2004-2709 State: PUBLISHED Published: 2007-10-06T21:00:00Z Last Updated: 2024-09-16T21:02:22.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the strip_html_tags method for Gyach Enhanced (Gyach-E) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown vectors involving HTML tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/8969 - http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php
CVE ID: CVE-2004-2710 State: PUBLISHED Published: 2007-10-06T21:00:00Z Last Updated: 2024-09-17T00:20:39.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Gyach Enhanced (Gyach-E) before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to (1) sending certain typing statuses or (2) setting the chat room status bar to the current chat room name. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/8970 - http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php - http://www.osvdb.org/8971
CVE ID: CVE-2004-2711 State: PUBLISHED Published: 2007-10-06T21:00:00Z Last Updated: 2024-09-17T01:16:19.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Gyach Enhanced (Gyach-E) before 1.0.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to "avatar retrieval." Additional Analyst Notes: - CVE Program Container: References: - http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php - http://www.osvdb.org/8972
CVE ID: CVE-2004-2712 State: PUBLISHED Published: 2007-10-06T21:00:00Z Last Updated: 2024-09-17T03:12:59.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Gyach Enhanced (Gyach-E) before 1.0.0-SneakPeek-3 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to "URL data." Additional Analyst Notes: - CVE Program Container: References: - http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php - http://www.osvdb.org/8973
CVE ID: CVE-2004-2713 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\* to the EVERYONE group, which allows local users to cause a denial of service by modifying the folder contents or permissions. NOTE: this issue has been disputed by the vendor, who claims that it does not affect product functionality since the same information is also saved in a protected file Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2004-08/0389.html - http://archives.neohapsis.com
ontainer: References: - http://archives.neohapsis.com/archives/bugtraq/2004-08/0389.html - http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0883.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17099 - http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0933.html - http://www.osvdb.org/9761 - http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0871.html
CVE ID: CVE-2004-2714 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Window Maker 0.80.2 and earlier allows attackers to perform unknown actions via format string specifiers in a font specification in WMGLOBAL, probably a format string vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.windowmaker.org/src/ChangeLog - http://securitytracker.com/id?1011918 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17845 - http://www.osvdb.org/11108 - http://www.securityfocus.com/bid/11512 - http://secunia.com/advisories/12961
CVE ID: CVE-2004-2715 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: edituser.php3 in PHPMyChat 0.14.5 allow remote attackers to bypass authentication and gain administrative privileges by setting the do_not_login parameter to false. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/7149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16440 - http://secunia.com/advisories/11894 - http://www.securityfocus.com/bid/10556 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0252.html - http://securitytracker.com/id?1010515
CVE ID: CVE-2004-2716 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in usersL.php3 in PHPMyChat 0.14.5 allow remote attackers to execute arbitrary SQL commands via the (1) sortBy, (2) sortOrder, (3) startReg, (4) U, (5) LastCheck , and (6) R parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/7152 - http://secunia.com/advisories/11894 - http://www.securityfocus.com/bid/10556 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16442 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0252.html - http://
e.xforce.ibmcloud.com/vulnerabilities/16442 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0252.html - http://securitytracker.com/id?1010515
CVE ID: CVE-2004-2717 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in admin.php3 in PHPMyChat 0.14.5 allow remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in the (1) sheet and (2) What parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11894 - http://www.securityfocus.com/bid/10556 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0252.html - http://securitytracker.com/id?1010515 - http://www.osvdb.org/7150
CVE ID: CVE-2004-2718 State: PUBLISHED Published: 2007-10-06T21:00:00Z Last Updated: 2024-09-17T02:26:30.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPMyChat 0.14.5 does not remove or protect setup.php3 after installation, which allows attackers to obtain sensitive information including database passwords via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11894 - http://www.securiteam.com/unixfocus/6D00S0KC0S.html
CVE ID: CVE-2004-2719 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the UrlToLocal function in PunyLib.dll of Foxmail 5.0.300 allows remote attackers to execute arbitrary code via a mail message with a long From field, a different issue than CVE-2005-0339. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15640 - http://www.securityfocus.com/bid/9954 - https://www.exploit-db.com/exploits/164 - http://secunia.com/advisories/11231
CVE ID: CVE-2004-2720 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via javascript events in the Email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11895 - http://securityreason.com/securityalert/3200 - http://securitytracker.com/id?1010524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16444 - http://www.osvdb.org/7190 - http://www.securityfocus.com/bid/10564 - http:/
.xforce.ibmcloud.com/vulnerabilities/16444 - http://www.osvdb.org/7190 - http://www.securityfocus.com/bid/10564 - http://www.securityfocus.com/archive/1/366309 - http://www.sec-tec.co.uk/vulnerability/snitzxss.html - http://forum.snitz.com/forum/topic.asp?TOPIC_ID=53360
CVE ID: CVE-2004-2721 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CheckGroup function in openSkat VTMF before 2.1 generates public key pairs in which the "p" variable might not be prime, which allows remote attackers to determine the private key and decrypt messages. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012181 - http://www.osvdb.org/11652 - http://www.securityfocus.com/bid/11667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18049 - http://freshmeat.net/projects/openskat/?branch_id=36295&release_id=178549
CVE ID: CVE-2004-2722 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords. NOTE: the original researcher reports that the vendor has disputed this issue Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2004-03/1363.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15644 - http://securitytracker.com/id?1009575 - http://www.osvdb.org/4816
CVE ID: CVE-2004-2723 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: NessusWX 1.4.4 stores account passwords in plaintext in .session files, which allows local users to obtain passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4814 - http://www.securityfocus.com/bid/9993 - http://seclists.org/fulldisclosure/2004/Mar/1343.html - http://securitytracker.com/id?1009577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15641
CVE ID: CVE-2004-2724 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: LionMax Software Chat Anywhere 2.72a allows remote attackers to cause a denial of service (server crash and client CPU consumption) via a username beginning with percent (%) followed by a null character. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17148 - http://www.autistici.org/fdonato/advisory/ChatAnywhere2.72a-adv.txt - http://securitytracker.com/id?1011080 - http://www.osvdb.org/9275 - http://secunia.com/advisories/12398 - http://archives.neohapsis.
itytracker.com/id?1011080 - http://www.osvdb.org/9275 - http://secunia.com/advisories/12398 - http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1183.html
CVE ID: CVE-2004-2725 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in (a) search.php, (2) the email parameter in (b) subscribe.php, and (3) the return and (4) title parameters in (c) forum_2.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/11706 - http://www.securityfocus.com/bid/11654 - http://www.osvdb.org/11705 - http://secunia.com/advisories/13202 - http://www.osvdb.org/11704 - https://ex
m/bid/11654 - http://www.osvdb.org/11705 - http://secunia.com/advisories/13202 - http://www.osvdb.org/11704 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18057 - http://securitytracker.com/id?1012213
CVE ID: CVE-2004-2726 State: PUBLISHED Published: 2007-10-09T10:00:00Z Last Updated: 2024-09-16T16:58:34.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the Authorization header, which allows remote attackers to cause a denial of service (null dereference and application crash). NOTE: This is a different vulnerability than CVE-2005-1348. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2004-05/0159.html - http://secunia.com/advisories/11588 - http://www.oliverkarow.de/research/MailWebHTTPAuthCrash.txt
CVE ID: CVE-2004-2727 State: PUBLISHED Published: 2007-10-09T10:00:00 Last Updated: 2024-08-08T01:36:25.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MEHTTPS (HTTPMail) of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a denial of service (application crash) via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/6037 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16115 - http://www.vupen.com/english/advisories/2005/0383 - http://www.osvdb.org/6038 - http://secunia.com/advisories/11588 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16114 - http://www.hat-s
38 - http://secunia.com/advisories/11588 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16114 - http://www.hat-squad.com/en/000071.html - http://securitytracker.com/id?1010107 - http://www.securityfocus.com/bid/10312