Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
hat.com/support/errata/RHSA-2004-222.html - http://www.novell.com/linux/security/advisories/2004_14_kdelibs.html - http://www.kde.org/info/security/advisory-20040517-1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16163 - http://www.securityfocus.com/advisories/6717 - http://www.securityfocus.com/archive/1/363225 - http://www.debian.org/security/2004/dsa-518 - http://www.securityfocus.com/advisories/6743 - http://www.osvdb.org/6107 - http://marc.info/?l=bugtraq&m=108481412427344&w=2 - http://secunia.com/advisories/11602 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000843 - http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-securit
coes/?id=a&anuncio=000843 - http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.362635 - http://security.gentoo.org/glsa/glsa-200405-11.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A954 - http://www.securityfocus.com/bid/10358 - http://www.ciac.org/ciac/bulletins/o-146.shtml
CVE ID: CVE-2004-0412 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T00:17:14.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10412 - http://security.gentoo.org/glsa/glsa-200406-04.xml - http://secunia.com/advisories/11701 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16256 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:051 - http://marc.info/?l=bugtraq&m=109034869927955&w=2 - http://distro.conectiv
advisories/advisory.php?name=MDKSA-2004:051 - http://marc.info/?l=bugtraq&m=109034869927955&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=123559 - http://mail.python.org/pipermail/mailman-announce/2004-May/000072.html
CVE ID: CVE-2004-0413 State: PUBLISHED Published: 2004-06-23T04:00:00 Last Updated: 2024-08-08T00:17:14.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL strings, which allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via an integer overflow that leads to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10519 - https://bugzilla.fedora.us/show_bug.cgi?id=1748 - http://www.novell.com/linux/security/advisories/2004_18_subvers
0519 - https://bugzilla.fedora.us/show_bug.cgi?id=1748 - http://www.novell.com/linux/security/advisories/2004_18_subversion.html - http://www.securityfocus.com/advisories/6847 - http://www.gentoo.org/security/en/glsa/glsa-200406-07.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/16396 - http://subversion.tigris.org/security/CAN-2004-0413-advisory.txt - http://www.securityfocus.com/archive/1/365836
CVE ID: CVE-2004-0414 State: PUBLISHED Published: 2004-06-11T04:00:00 Last Updated: 2024-08-08T00:17:14.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10575 - http://security.e-matters.de/advisories/092004.html - ftp://patches.sgi.com/support/free/security/advisor
Adef%3A10575 - http://security.e-matters.de/advisories/092004.html - ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc - http://www.debian.org/security/2004/dsa-517 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A993 - http://marc.info/?l=bugtraq&m=108716553923643&w=2 - http://www.redhat.com/support/errata/RHSA-2004-233.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:058 - http://security.gentoo.org/glsa/glsa-200406-06.xml - ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc - http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html
CVE ID: CVE-2004-0415 State: PUBLISHED Published: 2004-08-05T04:00:00 Last Updated: 2024-08-08T00:17:14.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portions of kernel memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-413.html - http://www.redhat.com/support/errata/RHSA-2004-418.html - http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9965 - http://distro.conectiva.com.br/atualizacoes/?id=a&anunci
pository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9965 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000879 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16877 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:087 - ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc
CVE ID: CVE-2004-0416 State: PUBLISHED Published: 2004-06-11T04:00:00 Last Updated: 2024-08-08T00:17:14.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-519 - http://security.e-matters.de/advisories/092004.html - ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc - http://marc.info/?l=bugtraq&m=108716553923643&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mit
p://marc.info/?l=bugtraq&m=108716553923643&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10070 - http://www.redhat.com/support/errata/RHSA-2004-233.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:058 - http://security.gentoo.org/glsa/glsa-200406-06.xml - ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A994 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html
CVE ID: CVE-2004-0417 State: PUBLISHED Published: 2004-06-11T04:00:00 Last Updated: 2024-08-08T00:17:14.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11145 - http://www.debian.org/security/2004/dsa-519 - http://security.e-matters.de/advisories/092004.html - ftp://p
ef%3A11145 - http://www.debian.org/security/2004/dsa-519 - http://security.e-matters.de/advisories/092004.html - ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc - http://marc.info/?l=bugtraq&m=108716553923643&w=2 - http://www.redhat.com/support/errata/RHSA-2004-233.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:058 - http://security.gentoo.org/glsa/glsa-200406-06.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1001 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html
CVE ID: CVE-2004-0418 State: PUBLISHED Published: 2004-06-11T04:00:00 Last Updated: 2024-08-08T00:17:14.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-519 - http://security.e-matters.de/advisories/092004.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11242 - ftp://patche
92004.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11242 - ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1003 - http://marc.info/?l=bugtraq&m=108716553923643&w=2 - http://www.redhat.com/support/errata/RHSA-2004-233.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:058 - http://security.gentoo.org/glsa/glsa-200406-06.xml - ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc - http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html
CVE ID: CVE-2004-0419 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T00:17:14.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16264 - http://bugs.xfree86.org/show_bug.cgi?id=1376 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073 - https://oval.cisecurity.org/repository/search/definit
andrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10161 - http://www.gentoo.org/security/en/glsa/glsa-200407-05.xml - http://www.ciac.org/ciac/bulletins/p-001.shtml - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900 - http://www.securityfocus.com/bid/10423 - http://securitytracker.com/id?1010306 - http://www.openbsd.org/errata.html#xdm - http://www.redhat.com/support/errata/RHSA-2004-478.html
CVE ID: CVE-2004-0420 State: PUBLISHED Published: 2004-04-20T04:00:00 Last Updated: 2024-08-08T00:17:14.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14964 - http://www.securityfocus.com/bid/9510 - http://www.us-cert.gov/cas/techalerts/TA04-196A.html -
m/vulnerabilities/14964 - http://www.securityfocus.com/bid/9510 - http://www.us-cert.gov/cas/techalerts/TA04-196A.html - http://secunia.com/advisories/10736/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2894 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3386 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3604 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2245 - http://www.securityfocus.com/archive/1/351379 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3533 - http://www.kb.cert.org
9 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3533 - http://www.kb.cert.org/vuls/id/106324 - http://www.security-express.com/archives/bugtraq/2004-01/0300.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2381 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-024
CVE ID: CVE-2004-0421 State: PUBLISHED Published: 2004-05-05T04:00:00 Last Updated: 2024-08-08T00:17:14.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=fedora-announce-list&m=108451353608968&w=2 - http://marc.info/?l=bugtraq&m=108334922320309&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A971 - http://www.debia
0309&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A971 - http://www.debian.org/security/2004/dsa-498 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11710 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:040 - http://secunia.com/advisories/22958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16022 - http://lists.apple.com/mhonarc/security-announce/msg00056.html - http://www.securityfocus.com/bid/10244 - http://marc.info/?l=fedora-announce-list&m=108451350029261&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:213 - http://www.redhat.com/support/errata/RHSA-2004-180.ht
http://www.mandriva.com/security/advisories?name=MDKSA-2006:213 - http://www.redhat.com/support/errata/RHSA-2004-180.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:212 - http://marc.info/?l=bugtraq&m=108335030208523&w=2 - http://www.redhat.com/support/errata/RHSA-2004-181.html - http://secunia.com/advisories/22957
CVE ID: CVE-2004-0422 State: PUBLISHED Published: 2004-05-06T04:00:00 Last Updated: 2024-08-08T00:17:14.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-344.html - http://www.debian.org/security/2004/dsa-500 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16027
CVE ID: CVE-2004-0423 State: PUBLISHED Published: 2004-04-20T04:00:00 Last Updated: 2024-08-08T00:17:14.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108239608131119&w=2
CVE ID: CVE-2004-0424 State: PUBLISHED Published: 2004-04-30T04:00:00 Last Updated: 2024-08-08T00:17:14.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option. Additional Analyst Notes: - CVE Program Container: References: - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.659586 - http://www.novell.com/linux/security/advisories/2004_10_kernel.html - https://oval.cisecurity.org/repository/search/definition/oval%3Ao
ll.com/linux/security/advisories/2004_10_kernel.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A939 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11214 - http://www.redhat.com/support/errata/RHSA-2004-183.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:037 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15907 - ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc - http://www.securityfocus.com/bid/10179 - http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html - http://www.isec.pl/vulnerabilities/isec-0015-msfilter.txt - http://distro.conectiva.com
ies/engarde_advisory-4285.html - http://www.isec.pl/vulnerabilities/isec-0015-msfilter.txt - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852 - http://marc.info/?l=bugtraq&m=108253171301153&w=2
CVE ID: CVE-2004-0425 State: PUBLISHED Published: 2004-05-05T04:00:00 Last Updated: 2024-08-08T00:17:14.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15950 - http://www.atstake.com/research/advisories/2004/a042204-1.txt - http://www.securityfocus.com/bid/10198
CVE ID: CVE-2004-0426 State: PUBLISHED Published: 2004-04-30T04:00:00 Last Updated: 2024-08-08T00:17:14.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200407-10.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A967 - http://secunia.com/advisories/11523 - http://marc.info/?l=bugtraq&m=108515912212018&w=2 - https://exchange.xforce.ibmcloud.com/vulne
ia.com/advisories/11523 - http://marc.info/?l=bugtraq&m=108515912212018&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16014 - http://secunia.com/advisories/11688 - http://secunia.com/advisories/11669 - http://www.ciac.org/ciac/bulletins/o-134.shtml - http://www.redhat.com/support/errata/RHSA-2004-192.html - http://secunia.com/advisories/12054 - http://secunia.com/advisories/11514 - http://secunia.com/advisories/11993 - http://rsync.samba.org/ - http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.403462 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:042 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m
riva.com/security/advisories?name=MDKSA-2004:042 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9495 - http://secunia.com/advisories/11537 - http://www.debian.org/security/2004/dsa-499 - http://secunia.com/advisories/11583 - http://www.ciac.org/ciac/bulletins/o-212.shtml - http://www.securityfocus.com/bid/10247 - http://www.trustix.net/errata/misc/2004/TSL-2004-0024-rsync.asc.txt - http://secunia.com/advisories/11515
CVE ID: CVE-2004-0427 State: PUBLISHED Published: 2004-04-30T04:00:00 Last Updated: 2024-08-08T00:17:14.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://www.redhat.com/support/errata/RHSA-2004-327.html - http://secunia.com/advisor
tp://secunia.com/advisories/20163 - http://www.redhat.com/support/errata/RHSA-2004-327.html - http://secunia.com/advisories/11464 - http://linux.bkbits.net:8080/linux-2.6/cset%40407b1217x4jtqEkpFW2g_-RcF0726A - https://exchange.xforce.ibmcloud.com/vulnerabilities/16002 - http://www.debian.org/security/2006/dsa-1082 - http://www.redhat.com/support/errata/RHSA-2004-255.html - http://fedoranews.org/updates/FEDORA-2004-111.shtml - http://secunia.com/advisories/11861 - http://marc.info/?l=linux-kernel&m=108139073506983&w=2 - http://www.redhat.com/support/errata/RHSA-2004-260.html - http://www.novell.com/linux/security/advisories/2004_10_kernel.html - http://www.debian.org/security/2006/dsa-1070 -
l - http://www.novell.com/linux/security/advisories/2004_10_kernel.html - http://www.debian.org/security/2006/dsa-1070 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10297 - http://secunia.com/advisories/20162 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:037 - http://secunia.com/advisories/11891 - http://secunia.com/advisories/11486 - http://www.turbolinux.com/security/2004/TLSA-2004-14.txt - http://secunia.com/advisories/11541 - http://linux.bkbits.net:8080/linux-2.4/cset%40407bf20eDeeejm8t36_tpvSE-8EFHA - http://www.debian.org/security/2006/dsa-1067 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846 - http://www.sec
ww.debian.org/security/2006/dsa-1067 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846 - http://www.securityfocus.com/bid/10221 - http://www.debian.org/security/2006/dsa-1069 - ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc - http://secunia.com/advisories/11429 - ftp://patches.sgi.com/support/free/security/advisories/20040505-01-U.asc - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2819 - http://www.ciac.org/ciac/bulletins/o-164.shtml - http://secunia.com/advisories/20202 - http://security.gentoo.org/glsa/glsa-200407-02.xml - http://secunia.com/advisories/11892 - http://secunia.com/advisories/20338
CVE ID: CVE-2004-0428 State: PUBLISHED Published: 2005-03-02T05:00:00 Last Updated: 2024-08-08T00:17:14.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in CoreFoundation in Mac OS X 10.3.3 and Mac OS X 10.3.3 Server, related to "the handling of an environment variable," has unknown attack vectors and unknown impact. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1010045 - http://www.auscert.org.au/render.html?it=4070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16051 - http://lists.virus.org/macsec-0405/msg00000.html - http://www.securityfocus.com/bid/10270 - http://secunia.com/advisories/11539
CVE ID: CVE-2004-0429 State: PUBLISHED Published: 2005-03-02T05:00:00 Last Updated: 2024-08-08T00:17:14.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability related to "the handling of large requests" in RAdmin for Apple Mac OS X 10.3.3 and Mac OS X 10.2.8 may allow attackers to have unknown impact via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108369640424244&w=2 - http://securitytracker.com/id?1010045 - http://www.auscert.org.au/render.html?it=4070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16053 - http://lists.apple.com/archives/security-announce/2004/May/msg00000.html
ge.xforce.ibmcloud.com/vulnerabilities/16053 - http://lists.apple.com/archives/security-announce/2004/May/msg00000.html - http://secunia.com/advisories/11539/ - http://www.ciac.org/ciac/bulletins/o-138.shtml
CVE ID: CVE-2004-0430 State: PUBLISHED Published: 2004-05-06T04:00:00 Last Updated: 2024-08-08T00:17:14.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string that is longer than the associated length field. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2004/a050304-1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16049 - http://securit