Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-1669 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MERAK Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to execute arbitrary web script or HTML via the (1) User name parameter to accountsettings.html or (2) Search string parameter to search.html. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17313 - http://marc.info/?l=bugtraq&m=109483971420067&w=2 - http://secunia.com/advisories/12789 - http://www.securityfocus.
13 - http://marc.info/?l=bugtraq&m=109483971420067&w=2 - http://secunia.com/advisories/12789 - http://www.securityfocus.com/bid/11371
CVE ID: CVE-2004-1670 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote attackers to (1) create arbitrary directories via a .. (dot dot) in the user parameter to viewaction.html or (2) rename arbitrary files via a ....// (doubled dot dot) in the folderold or folder parameters to folders.html. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109483971420067&w=2 - http://secunia.com/advisories/12789 - http://www.secu
References: - http://marc.info/?l=bugtraq&m=109483971420067&w=2 - http://secunia.com/advisories/12789 - http://www.securityfocus.com/bid/11371 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17314
CVE ID: CVE-2004-1671 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to gain sensitive information via a direct request to (1) accountsettings_add.html or (2) topmenu.html. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109483971420067&w=2 - http://secunia.com/advisories/12789 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17315 - http://www.securityfocus.com/bid/11371
CVE ID: CVE-2004-1672 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: attachment.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to view other users' attachments by specifying the username and message ID in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17316 - http://marc.info/?l=bugtraq&m=109483971420067&w=2 - http://secunia.com/advisories/12789 - http://www.securityfocus.com/bid/11371
CVE ID: CVE-2004-1673 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17317 - http://marc.info/?l=bugtraq&m=109483971420067&w=2 - http://secunia.com/advisories/12789 - http://www.securityfocus.com/bid/11371
CVE ID: CVE-2004-1674 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to (1) delete arbitrary files via the originalfolder parameter or (2) move arbitrary files via the messageid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17976 - http://marc.info/?l=bugtraq&m=109483971420067&w=2 - http://secunia.com/advisories/12789 - http://www.securityfocus.com/bid/11371
CVE ID: CVE-2004-1675 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQUE (STOU) command with an MS-DOS device name argument such as (1) COM1, (2) LPT1, (3) PRN, or (4) AUX. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17329 - http://secunia.com/advisories/12507/ - http://www.securityfocus.com/bid/11155 - http://marc.info/?l=bugtraq&m=109495074211638&w=2
CVE ID: CVE-2004-1676 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the image sending feature in Gadu-Gadu 6.0 build 149 allows remote attackers to execute arbitrary code via a crafted GG_MSG_IMAGE_REPLY message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11158 - http://marc.info/?l=bugtraq&m=109508834910733&w=2 - http://secunia.com/advisories/12510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17324
CVE ID: CVE-2004-1677 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: pdesk.cgi in PerlDesk allows remote attackers to gain sensitive information via an invalid lang parameter, which includes pathname information in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17343 - http://marc.info/?l=bugtraq&m=109509026406554&w=2
CVE ID: CVE-2004-1678 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pdesk.cgi in PerlDesk allows remote attackers to read portions of arbitrary files and possibly execute arbitrary Perl modules via ".." sequences terminated by a %00 (null) character in the lang parameter, which can leak portions of the requested files if a compilation error message occurs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19712 - http://www.securityfocus.com/bid/11160 -
advisories/12512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19712 - http://www.securityfocus.com/bid/11160 - http://marc.info/?l=bugtraq&m=109509026406554&w=2
CVE ID: CVE-2004-1679 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in TwinFTP 1.0.3 R2 allows remote attackers to create arbitrary files via a .../ (triple dot) in the (1) CWD, (2) STOR, or (3) RETR commands. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109509243831121&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17323 - http://www.security.org.sg/vuln/twinftp103r2.html - http://secunia.com/advisories/12511/ - http://www.securityfocus.com/bid/11159
CVE ID: CVE-2004-1680 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to cause a denial of service (VxWorks OS crash) via a long HTTP GET request, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11161 - http://secunia.com/advisories/12523 - http://www.atstake.com/research/advisories/2004/a091304-2.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/17346
CVE ID: CVE-2004-1681 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI for QNX RTP 6.1 allow local users to gain privileges via a long -s (server) command line parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.rfdslabs.com.br/qnx-advs-03-2004.txt - http://marc.info/?l=bugtraq&m=109510393407597&w=2 - http://www.securityfocus.com/bid/11164 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17339
CVE ID: CVE-2004-1682 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17347 - http://marc.info/?l=bugtraq&m=109511327005476&w=2 - http://www.rfdslabs.com.br/qnx-advs-04-2004.txt - http://secunia.com/advisories/12533
CVE ID: CVE-2004-1683 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the PATH environment variable to reference a malicious io-graphics program before is executed by crrtrap. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17345 - http://marc.info/?l=bugtraq&m=109511737504357&w=2 - http://www.securityfocus.com/bid/11165
CVE ID: CVE-2004-1684 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel P681 running ZyNOS Vt020225a contains portions of memory in an ARP request, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109510732611448&w=2 - http://www.osvdb.org/9962 - http://www.securityfocus.com/bid/11167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17372
CVE ID: CVE-2004-1685 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: SMC routers SMC7004VWBR running firmware 1.00.014 and SMC7008ABR EU running firmware 1.42.003 allow remote attackers to bypass authentication by connecting to it from the same IP address as the administrator who is logged in, then accessing the setup_status.htm or status.HTM pages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17443 - http://www.osvdb.org/10088 - http://www.securityfocus.com/bid/11197 - http://marc.inf
mcloud.com/vulnerabilities/17443 - http://www.osvdb.org/10088 - http://www.securityfocus.com/bid/11197 - http://marc.info/?l=bugtraq&m=109526094614160&w=2
CVE ID: CVE-2004-1686 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTML page that contains an Internet Explorer formatted comment between the DOCTYPE tag and the HTML tag, as demonstrated using the DesignScience MathPlayer ActiveX plugin. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109539520310153&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20617 - http://www.securityfocus.com/bid/11200
CVE ID: CVE-2004-1687 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12590 - http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791 - http://marc.info/?l=bugtraq&m=109537195413691&w=2 - http://www.securityfocus.com/bid/11201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1
&m=109537195413691&w=2 - http://www.securityfocus.com/bid/11201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17421
CVE ID: CVE-2004-1688 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pigeon Server 3.02.0143 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a long login name sent to port 3103. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026515.html - http://secunia.com/advisories/12585 - http://www.securityfocus.com/bid/11203 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17427 - http://marc.info/?l=bugtraq&m=109543366631724&w=2
CVE ID: CVE-2004-1689 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12596 - http://marc.info/?l=bugtraq&m=109537972929201&w=2 - http://www.kb.cert.org/vuls/id/424358 - http://www.osvdb.org/10023 - http://www.securityfocus.com/bid/11204 - http://www.ciac.org/ciac/bulletins/o-219.shtml - https://exchange.x
org/10023 - http://www.securityfocus.com/bid/11204 - http://www.ciac.org/ciac/bulletins/o-219.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17424 - http://www.sudo.ws/sudo/alerts/sudoedit.html - http://packetstormsecurity.nl/0409-exploits/sudoedit.txt
CVE ID: CVE-2004-1690 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web Server in DNS4Me 3.0.0.4 allows remote attackers to execute arbitrary web script or HTML via the URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17425 - http://secunia.com/advisories/12595 - http://www.securityfocus.com/bid/11213 - http://www.gulftech.org/?node=research&article_id=00049-09162004 - http://securitytracker.com/id?1011334 - http://marc.info/?l=bugtraq&m=109552436811493&w=2
CVE ID: CVE-2004-1691 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service (CPU consumption and crash) via a large amount of data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17426 - http://secunia.com/advisories/12595 - http://www.securityfocus.com/bid/11213 - http://www.gulftech.org/?node=research&article_id=00049-09162004 - http://securitytracker.com/id?1011334 - http://marc.info/?l=bugtraq&m=109552436811493&w=2
CVE ID: CVE-2004-1692 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary web script or HTML via the (1) Itemid, (2) mosmsg, or (3) limit parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20616 - http://marc.info/?l=bugtraq&m=109571849713158&w=2 - http://mamboforge.net/frs/shownotes.php?release_id=1672 - http://www.securityfocus.com/bid/11220 - http://www.osvdb.org/10179
CVE ID: CVE-2004-1693 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1011365 - http://marc.info/?l=bugtraq&m=109571849713158&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17449 - http://www.securityfocus.com/bid/11220 - http://www.osvdb.org/1018
/exchange.xforce.ibmcloud.com/vulnerabilities/17449 - http://www.securityfocus.com/bid/11220 - http://www.osvdb.org/10180
CVE ID: CVE-2004-1694 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec ON Command CCM 5.4.x and iCommand 3.0.x has four default usernames and passwords, one of which is hardcoded, which allows remote attackers to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17447 - http://www.securityfocus.com/bid/11225 - http://www.sarc.com/avcenter/security/Content/2004.09.29.html - http://secunia.com/advisories/12604 - http://marc.info/?l=bugtraq&m=109571689621784&w=2
CVE ID: CVE-2004-1695 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL that contains an extra leading / (slash). Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109577497718374&w=2 - http://www.gulftech.org/?node=research&article_id=00051-09202004 - http://secunia.com/advisories/12616 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17450 - http://www.securityfocus.com/bid/11226
CVE ID: CVE-2004-1696 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to cause a denial of service (application crash) via a sequence of carriage returns sent to TCP port 66. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109577497718374&w=2 - http://www.gulftech.org/?node=research&article_id=00051-09202004 - http://secunia.com/advisories/12616 - http://www.securityfocus.com/bid/11226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17451
CVE ID: CVE-2004-1697 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Forgot your Password" link in Computer Associates (CA) Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12620 - http://marc.info/?l=bugtraq&m=109579952809320&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17464 - http://www.securityfocus.com/bid/11229
CVE ID: CVE-2004-1698 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Base64 function in PopMessenger 1.60 (before 20 Sep 2004) and earlier allows remote attackers to cause a denial of service (application crash) via invalid characters in a message, which causes several alert dialogs to be displayed and leads to a crash. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17465 - http://www.securityfocus.com/bid/11230 - http://secunia.com/advisories/12612/ - http://marc.info/?l=bugtraq&m=109581586128899&w=2
CVE ID: CVE-2004-1699 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: SettingsBase.php in Pinnacle ShowCenter 1.51 allows remote attackers to cause a denial of service (web interface errors) via an invalid Skin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109589167110196&w=2 - http://www.securityfocus.com/bid/11232 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17463 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026733.html
CVE ID: CVE-2004-1700 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SettingsBase.php in Pinnacle ShowCenter 1.51 build 121 allows remote attackers to inject arbitrary HTML or web script via the Skin parameter, which is echoed in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17708 - http://www.securityfocus.com/bid/11415 - http://secunia.com/advisories/12613
CVE ID: CVE-2004-1701 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-08T01:00:37.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code via a long SAUTH command during RSA authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/common/showdoc.php?idx=387&idxseccion=10 - http://marc.info/?l=bugtraq&m=109208394910086&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16935 - http://www.securityfocus.com/bid/10899 - http://secunia.com/advisories/122
e.xforce.ibmcloud.com/vulnerabilities/16935 - http://www.securityfocus.com/bid/10899 - http://secunia.com/advisories/12251 - http://marc.info/?l=bugtraq&m=110886670528775&w=2 - http://security.gentoo.org/glsa/glsa-200408-08.xml
CVE ID: CVE-2004-1702 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-08T01:00:37.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly check the return value of the ReceiveTransaction function, which leads to a failed malloc call and triggers to a null dereference, which allows remote attackers to cause a denial of service (crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/common/showdoc.php?idx=387&idxseccion=10 - http://marc.info/?l=bugtraq&m=109208394910086&w=2 - http://secunia.com/advisories/12251 - https://exch
7&idxseccion=10 - http://marc.info/?l=bugtraq&m=109208394910086&w=2 - http://secunia.com/advisories/12251 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16937 - http://www.securityfocus.com/bid/10900 - http://security.gentoo.org/glsa/glsa-200408-08.xml