Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-1327 State: PUBLISHED Published: 2005-01-06T05:00:00 Last Updated: 2024-08-08T00:46:12.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12038 - http://marc.info/?l=bugtraq&m=110356203624337&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18594 - http://secunia.com/advisories/13583/
CVE ID: CVE-2004-1328 State: PUBLISHED Published: 2005-01-06T05:00:00 Last Updated: 2024-08-08T00:46:12.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in newgrp in HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12029 - http://marc.info/?l=bugtraq&m=110355911415320&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5622 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18577 - http://secunia.com/advisories/13565/
CVE ID: CVE-2004-1329 State: PUBLISHED Published: 2005-01-06T05:00:00 Last Updated: 2024-08-08T00:46:12.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted execution path vulnerability in the diag commands (1) lsmcode, (2) diag_exec, (3) invscout, and (4) invscoutd in AIX 5.1 through 5.3 allows local users to execute arbitrary programs by modifying the DIAGNOSTICS environment variable to point to a malicious Dctrl program. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/701 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY64389&apar=only - http://marc.info/?l=bugtraq&m=110355931920123&w=2 - http://www.securityfocus.
port/search.wss?rs=0&q=IY64389&apar=only - http://marc.info/?l=bugtraq&m=110355931920123&w=2 - http://www.securityfocus.com/archive/1/464276/100/0/threaded - http://www-1.ibm.com/support/search.wss?rs=0&q=IY64277&apar=only - http://www.securityfocus.com/bid/12041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18620 - http://www.securityfocus.com/archive/1/464481/100/0/threaded
CVE ID: CVE-2004-1330 State: PUBLISHED Published: 2005-01-06T05:00:00 Last Updated: 2024-08-08T00:46:12.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username. Additional Analyst Notes: - CVE Program Container: References: - http://www.frsirt.com/exploits/20041220.paginit.c.php - http://marc.info/?l=bugtraq&m=110355931920123&w=2 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY64522&apar=only - http://www.securityfocus.com/bid/12043 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY64358&apar=only - https://exchange.xforce.ibmcloud.com/vulnerabilities/18618 - http://
m.com/support/search.wss?rs=0&q=IY64358&apar=only - https://exchange.xforce.ibmcloud.com/vulnerabilities/18618 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY64312&apar=only
CVE ID: CVE-2004-1331 State: PUBLISHED Published: 2005-01-06T05:00:00 Last Updated: 2024-08-08T00:46:12.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Security Warning" dialog and save arbitrary files with arbitrary extensions via the SaveAs command. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3220 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18181 - http://www.securityfocus.com/bid/11686 - http://www.frsirt.com/exploits/20041119.IESP2Unpatched.php - http://secunia.com/advisories/13203/ - h
us.com/bid/11686 - http://www.frsirt.com/exploits/20041119.IESP2Unpatched.php - http://secunia.com/advisories/13203/ - http://archives.neohapsis.com/archives/bugtraq/2004-11/0260.html - http://www.kb.cert.org/vuls/id/743974
CVE ID: CVE-2004-1332 State: PUBLISHED Published: 2005-01-06T05:00:00 Last Updated: 2024-08-08T00:46:12.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v (debug) option enabled, allows remote attackers to execute arbitrary code via a long command request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110797179710695&w=2 - http://securitytracker.com/id?1012650 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5701 - http://www.securityfocus.com/bid/12077 - http://marc.info/?l=bugtraq&m=110797179710695&w=2 - http://www.
%3Adef%3A5701 - http://www.securityfocus.com/bid/12077 - http://marc.info/?l=bugtraq&m=110797179710695&w=2 - http://www.kb.cert.org/vuls/id/647438 - http://secunia.com/advisories/13608 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18636 - http://www.idefense.com/application/poi/display?id=175&type=vulnerabilities&flashstatus=false
CVE ID: CVE-2004-1333 State: PUBLISHED Published: 2005-01-06T05:00:00 Last Updated: 2024-08-08T00:46:12.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the vc_resize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows local users to cause a denial of service (kernel crash) via a short new screen value, which leads to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.html - https://usn.ubuntu.com/47-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18523 - http://www.debian.org/security/2006/dsa-1082 - http
47-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18523 - http://www.debian.org/security/2006/dsa-1082 - http://www.novell.com/linux/security/advisories/2005_18_kernel.html - http://www.debian.org/security/2006/dsa-1070 - http://secunia.com/advisories/20162 - http://www.guninski.com/where_do_you_want_billg_to_go_today_2.html - http://www.securityfocus.com/bid/11956 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - http://secunia.com/advisories/17826 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532 - http://www.mandriva.com/security/advisories?name=MDKSA-2005
ttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://secunia.com/advisories/20202 - http://secunia.com/advisories/20338
CVE ID: CVE-2004-1334 State: PUBLISHED Published: 2005-01-06T05:00:00 Last Updated: 2024-08-08T00:46:12.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (kernel crash) via a cmsg_len that contains a -1, which leads to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.html - http://marc.info/?l=bugtraq&m=110383108211524&w=2 - http://www.guninski.com/where_do_you_want_billg_to_go_today_2.html - http://www.securityfocus.com/bid/11956 - https://exchange.xfor
guninski.com/where_do_you_want_billg_to_go_today_2.html - http://www.securityfocus.com/bid/11956 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18522
CVE ID: CVE-2004-1335 State: PUBLISHED Published: 2005-01-06T05:00:00 Last Updated: 2024-08-08T00:46:12.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (memory consumption) by repeatedly calling the ip_cmsg_send function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.html - http://marc.info/?l=bugtraq&m=110383108211524&w=2 - http://www.debian.org/security/2006/dsa-1082 - https://oval.cisecurity.org/repository/search/definition/oval%3Ao
4&w=2 - http://www.debian.org/security/2006/dsa-1082 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11085 - http://www.redhat.com/support/errata/RHSA-2005-017.html - http://www.debian.org/security/2006/dsa-1070 - http://www.redhat.com/support/errata/RHSA-2005-016.html - http://www.guninski.com/where_do_you_want_billg_to_go_today_2.html - http://www.securityfocus.com/bid/11956 - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18524 - http://secunia.com/advisories/20202 - http://secunia.com/advisories/20338
CVE ID: CVE-2004-1336 State: PUBLISHED Published: 2005-01-06T05:00:00 Last Updated: 2024-08-08T00:46:12.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18708 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286370 - http://marc.info/?l=bugtraq&m=110383942014839&w=2
CVE ID: CVE-2004-1337 State: PUBLISHED Published: 2005-01-06T05:00:00 Last Updated: 2024-08-08T00:46:12.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18673 - http://marc.info/?l=bugtraq&m=110384535113035&w=2 - http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930 - http://www.securityfocus.com/bid/12093
CVE ID: CVE-2004-1338 State: PUBLISHED Published: 2005-01-06T05:00:00 Last Updated: 2024-08-08T00:46:12.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to add arbitrary functions to the SDO_CMT_DBK_FN_TABLE and SDO_CMT_CBK_DML_TABLE, then performing a DELETE on the SDO_TXN_IDX_INSERTS table, which causes the SDO_CMT_CBK_TRIG trigger to execute the user-supplied functions. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110382230614420&w=2 - http://www.ngssoftware.com/
: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110382230614420&w=2 - http://www.ngssoftware.com/advisories/oracle23122004I.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/18655
CVE ID: CVE-2004-1339 State: PUBLISHED Published: 2005-01-06T05:00:00 Last Updated: 2024-08-08T00:46:12.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the new.table_name or new.column_name parameters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110382230614420&w=2 - http://www.ngssoftware.com/advisories/oracle23122004I.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/18655
CVE ID: CVE-2004-1340 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-08T00:46:12.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pam_radius_auth.conf set to be world-readable, which allows local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013030 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19087 - http://secunia.com/advisories/14046 - http://www.debian.org/security/2005/dsa-659
CVE ID: CVE-2004-1341 State: PUBLISHED Published: 2005-04-19T04:00:00 Last Updated: 2024-08-08T00:46:12.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in info2www before 1.2.2.9 allows remote attackers to inject arbitrary web script or HTML via the arguments to info2www. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-711 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20179
CVE ID: CVE-2004-1342 State: PUBLISHED Published: 2005-04-27T04:00:00Z Last Updated: 2024-09-16T22:55:47.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-715
CVE ID: CVE-2004-1343 State: PUBLISHED Published: 2005-04-27T04:00:00Z Last Updated: 2024-09-17T02:01:39.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service (server crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-715
CVE ID: CVE-2004-1344 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-1345 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:46:12.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Sun StorEdge Enterprise Storage Manager (ESM) 2.1 for Solaris 8 and Solaris 9 allows local users with the "ESMUser" role to gain root access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10580 - http://secunia.com/advisories/11935/ - http://www.kb.cert.org/vuls/id/976470 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1707 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57581-1&searchclause=security
l%3Aorg.mitre.oval%3Adef%3A1707 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57581-1&searchclause=security - https://exchange.xforce.ibmcloud.com/vulnerabilities/16463 - http://www.ciac.org/ciac/bulletins/o-166.shtml
CVE ID: CVE-2004-1346 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:46:12.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sun Solaris Volume Manager (SVM) on Solaris 9 allows local users to cause a denial of service (kernel panic) via a malformed probe request to the SVM. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/390742 - http://secunia.com/advisories/12104/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/16729 - http://www.auscert.org.au/render.html?it=4253 - http://www.securityfocus.com/bid/10747 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57598-1&searchclause=secur
://www.securityfocus.com/bid/10747 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57598-1&searchclause=security - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3465
CVE ID: CVE-2004-1347 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:46:12.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: X Display Manager (XDM) on Solaris 8 allows remote attackers to cause a denial of service (XDM crash) via an invalid X Display Manager Control Protocol (XDMCP) request. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101549-1 - http://www.kb.cert.org/vuls/id/139504 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57619-1&searchclause=security - http://secunia.com/advisories/12257/ - http://www.securityfocus.com/bid/10911 - https://exchange.xfor
hclause=security - http://secunia.com/advisories/12257/ - http://www.securityfocus.com/bid/10911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16940 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100113
CVE ID: CVE-2004-1348 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:46:12.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in in.named on Solaris 8 allows remote attackers to cause a denial of service (process crash). Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57614-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17269 - http://secunia.com/advisories/12470/ - http://www.securityfocus.com/bid/11118 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3960 - http://www.auscert.org.au/render.html?it=4369
CVE ID: CVE-2004-1349 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:46:12.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17577 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57600-1&searchclause=security - http://www.kb.cert.org/vuls/id/635998 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mit
curity - http://www.kb.cert.org/vuls/id/635998 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1654 - http://www.securityfocus.com/bid/11318 - http://secunia.com/advisories/12744
CVE ID: CVE-2004-1350 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:46:12.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11566 - http://securitytracker.com/id?1012005 - http://www.pentest.co.uk/documents/ptl-2004-06.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security - http://www.kb.cert.org/vuls/id/9
ttp://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security - http://www.kb.cert.org/vuls/id/964401 - http://www.ciac.org/ciac/bulletins/p-027.shtml - http://www.auscert.org.au/render.html?it=4516 - http://www.osvdb.org/displayvuln.php?osvdb_id=11304 - http://secunia.com/advisories/13036/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/17920
CVE ID: CVE-2004-1351 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:46:12.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the rwho daemon (in.rwhod) for Solaris 7 through 9 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A592 - http://www.securityfocus.com/bid/11840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18385 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57659-1&searchclause=%22category:security%22%20%22availability%2C%20security%22 - http:/
earch/document.do?assetkey=1-26-57659-1&searchclause=%22category:security%22%20%22availability%2C%20security%22 - http://www.ciac.org/ciac/bulletins/p-050.shtml - http://www.auscert.org.au/render.html?it=4597
CVE ID: CVE-2004-1352 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:46:12.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ping daemon of Sun Solaris 7 through 9 may allow local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3400 - http://www.osvdb.org/displayvuln.php?osvdb_id=12168 - http://www.securityfocus.com/bid/11782 - http://www.auscert.org.au/render.html?it=4586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18310 - http://secunia.com/advisories/13340 - http://securitytrack
https://exchange.xforce.ibmcloud.com/vulnerabilities/18310 - http://secunia.com/advisories/13340 - http://securitytracker.com/id?1012368 - http://www.ciac.org/ciac/bulletins/p-045.shtml - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57675-1&searchclause=%22category:security%22%20%22availability%2C%20security%22
CVE ID: CVE-2004-1353 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:46:12.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in LDAP on Sun Solaris 8 and 9, when using Role Based Access Control (RBAC), allows local users to execute certain commands with additional privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17757 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4834 - http://www.osvdb.org/displayvuln.php?osvdb_id=10939 - http://securitytracker.com/id?1011789 - http://www.securityfocus.com/bid/11459 - htt
rg/displayvuln.php?osvdb_id=10939 - http://securitytracker.com/id?1011789 - http://www.securityfocus.com/bid/11459 - http://www.ciac.org/ciac/bulletins/p-017.shtml - http://secunia.com/advisories/12873/ - http://www.auscert.org.au/render.html?it=4482 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57657-1&searchclause=%22category:security%22%20%22availability%2C%20security%22
CVE ID: CVE-2004-1354 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:46:12.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Solaris Management Console (SMC) in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive information in conjunction with a directory traversal (..) attack. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57559-1&searchclause=%22category:security%22%20%20111313-02 - https://oval.cisecurity.org/repository/sear
?assetkey=1-26-57559-1&searchclause=%22category:security%22%20%20111313-02 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1482 - http://spoofed.org/files/text/solaris-smc-advisory.txt - http://www.securityfocus.com/bid/8873 - http://secunia.com/advisories/11616/ - http://www.derkeiler.com/Mailing-Lists/securityfocus/focus-sun/2003-10/0032.html - http://www.auscert.org.au/render.html?it=4105 - http://www.osvdb.org/displayvuln.php?osvdb_id=6119 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16146 - http://www.securityfocus.com/bid/10349