Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
www.osvdb.org/7211 - http://marc.info/?l=bugtraq&m=108786257609932&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16468 - http://marc.info/?l=bugtraq&m=108797273127182&w=2 - http://archives.neohapsis.com/archives/bugtraq/2004-07/0014.html - http://securitytracker.com/id?1010562
CVE ID: CVE-2004-0616 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obtain sensitive information such as the password, which is stored in plaintext. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16472 - http://www.securityfocus.com/bid/10589 - http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0710.html - http://marc.info/?l=bugtraq&m=108794963119034&w=2
CVE ID: CVE-2004-0617 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ArbitroWeb 0.6 allows remote attackers to inject arbitrary script or HTML via the rawURL parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10592 - http://marc.info/?l=bugtraq&m=108794392303244&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16481
CVE ID: CVE-2004-0618 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via an execve system call with an unaligned memory address as an argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10596 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16499 - http://marc.info/?l=bugtraq&m=108816603102865&w=2
CVE ID: CVE-2004-0619 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a negative add_dsa_buf_bytes variable, which leads to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108802653409053&w=2 - http://www.redhat.com/support/errata/RHSA-2005-283.html - http://www.redhat.com/support/errata/RHSA-2004-549.html - http://www.ciac.org/ciac/bulletins/p-047.
RHSA-2005-283.html - http://www.redhat.com/support/errata/RHSA-2004-549.html - http://www.ciac.org/ciac/bulletins/p-047.shtml - http://www.securityfocus.com/bid/10599 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9773 - http://secunia.com/advisories/11936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16459
CVE ID: CVE-2004-0620 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote attackers to inject arbitrary HTML or script as other users via the Edit-panel. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16502 - http://www.securityfocus.com/bid/10602 - http://marc.info/?l=bugtraq&m=108809720026642&w=2
CVE ID: CVE-2004-0621 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a list_user operation with the ulevel parameter set to 1 (administrator level), which lists all users and their passwords. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16507 - http://marc.info/?l=bugtraq&m=108811585025216&w=2 - http://www.securityfocus.com/bid/10605
CVE ID: CVE-2004-0622 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindow.app), Keychain, or FileVault passwords, which could allow the root user or an attacker with physical access to obtain sensitive information by reading memory. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108819559925981&w=2 - http://www.securityfocus.com/archive/1/488930/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/16557 - http://ww
rityfocus.com/archive/1/488930/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/16557 - http://www.securityfocus.com/archive/1/488948/100/100/threaded - http://citp.princeton.edu/pub/coldboot.pdf
CVE ID: CVE-2004-0623 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108820000823191&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16517 - http://www.securityfocus.com/bid/10609
CVE ID: CVE-2004-0624 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:27.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php for Artmedic links 5.0 (artmedic_links5) allows remote attackers to execute arbitrary PHP code by modifying the id parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16518 - http://marc.info/?l=bugtraq&m=108820257812904&w=2
CVE ID: CVE-2004-0625 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication and gain privileges via the login page. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0893.html - http://marc.info/?l=bugtraq&m=108844087931959&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16513 - http://www.zone-h.org/en/advisories/read/id=4892/ - http://www.securityfocus.com/bid/10614
CVE ID: CVE-2004-0626 State: PUBLISHED Published: 2004-07-06T04:00:00 Last Updated: 2024-08-08T00:24:26.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tcp_find_option function of the netfilter subsystem in Linux kernel 2.6, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a large option length that produces a negative integer after a casting operation to the char type. Additional Analyst Notes: - CVE Program Container: References: - http://lwn.net/Articles/91964/ - http://www.gentoo.org/security/en/glsa/glsa-200407-12.xml - http://marc.info/?l=bugtraq&m=108861141304495&w=2 - https://exc
p://www.gentoo.org/security/en/glsa/glsa-200407-12.xml - http://marc.info/?l=bugtraq&m=108861141304495&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16554 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852 - http://www.novell.com/linux/security/advisories/2004_20_kernel.html
CVE ID: CVE-2004-0627 State: PUBLISHED Published: 2004-07-08T04:00:00 Last Updated: 2024-08-08T00:24:26.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/184030 - http://marc.info/?l=bugtraq&m=108904917528205&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.html
CVE ID: CVE-2004-0628 State: PUBLISHED Published: 2004-07-08T04:00:00 Last Updated: 2024-08-08T00:24:26.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long scramble string. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108904917528205&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.html - http://www.kb.cert.org/vuls/id/645326 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16612
CVE ID: CVE-2004-0629 State: PUBLISHED Published: 2004-08-18T04:00:00 Last Updated: 2024-08-08T00:24:26.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote attackers to execute arbitrary code via a URI for a PDF file with a null terminator (%00) followed by a long string. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=126&type=vulnerabilities - http://www.securityfocus.com/bid/10947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16998 - http://www.gentoo.org/security/e
urityfocus.com/bid/10947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16998 - http://www.gentoo.org/security/en/glsa/glsa-200408-14.xml - http://www.adobe.com/support/techdocs/330527.html
CVE ID: CVE-2004-0630 State: PUBLISHED Published: 2004-08-14T04:00:00 Last Updated: 2024-08-08T00:24:26.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters ("`" or backtick) in the filename of the PDF file that is provided to the uudecode command. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-432.html - http://www.adobe.com/support/techdocs/322914.html - http://www.idefense.com/application/poi/display?i
SA-2004-432.html - http://www.adobe.com/support/techdocs/322914.html - http://www.idefense.com/application/poi/display?id=124&type=vulnerabilities - http://www.securityfocus.com/bid/10931 - http://security.gentoo.org/glsa/glsa-200408-14.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/16973
CVE ID: CVE-2004-0631 State: PUBLISHED Published: 2004-08-14T04:00:00 Last Updated: 2024-08-08T00:24:27.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via a long filename for the PDF file that is provided to the uudecode command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16972 - http://www.securityfocus.com/bid/10932 - http://www.redhat.com/support/errata/RHSA-2004-432.html - http://www.adobe.
2 - http://www.securityfocus.com/bid/10932 - http://www.redhat.com/support/errata/RHSA-2004-432.html - http://www.adobe.com/support/techdocs/322914.html - http://www.idefense.com/application/poi/display?id=125&type=vulnerabilities - http://security.gentoo.org/glsa/glsa-200408-14.xml
CVE ID: CVE-2004-0632 State: PUBLISHED Published: 2004-07-16T04:00:00 Last Updated: 2024-08-08T00:24:26.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader, triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/techdocs/34222.htm - http://www.idefense.com/application/poi/display?id=116&type=vulnerabilities - https://exchange.xforce.ibmcloud.com/vulnerabilities/16667 - http://www.ad
ion/poi/display?id=116&type=vulnerabilities - https://exchange.xforce.ibmcloud.com/vulnerabilities/16667 - http://www.adobe.com/support/techdocs/330527.html
CVE ID: CVE-2004-0633 State: PUBLISHED Published: 2004-07-08T04:00:00 Last Updated: 2024-08-08T00:24:26.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1010655 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:067 - http://www.ethereal.com/appnotes/enpa-sa-00015.html - http://www.kb.cert.org/vuls/id/829422 - http://secunia.com/advisories/12024 - h
hereal.com/appnotes/enpa-sa-00015.html - http://www.kb.cert.org/vuls/id/829422 - http://secunia.com/advisories/12024 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16630 - http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00013.html - http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00014.html - http://www.redhat.com/support/errata/RHSA-2004-378.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9931 - http://www.gentoo.org/security/en/glsa/glsa-200407-08.xml
CVE ID: CVE-2004-0634 State: PUBLISHED Published: 2004-07-08T04:00:00 Last Updated: 2024-08-08T00:24:27.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes a null dereference. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10252 - http://securitytracker.com/id?1010655 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKS
.conectiva.com.br/atualizacoes/?id=a&anuncio=000916 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:067 - http://www.ethereal.com/appnotes/enpa-sa-00015.html - http://secunia.com/advisories/12024 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381 - http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00013.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16631 - http://www.kb.cert.org/vuls/id/518782 - http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00014.html - http://www.redhat.com/support/errata/RHSA-2004-378.html - http://www.gentoo.org/security/en/glsa/glsa-200407-08.xml
CVE ID: CVE-2004-0635 State: PUBLISHED Published: 2004-07-08T04:00:00 Last Updated: 2024-08-08T00:24:26.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malformed or (2) missing community string, which causes an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1010655 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:067 - http://www.ethereal.com/appnotes/enpa-sa-00015.html - http://secunia.c
/en/advisories/advisory.php?name=MDKSA-2004:067 - http://www.ethereal.com/appnotes/enpa-sa-00015.html - http://secunia.com/advisories/12024 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9721 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381 - http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00013.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16632 - http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00014.html - http://www.debian.org/security/2004/dsa-528 - http://www.kb.cert.org/vuls/id/835846 - http://www.redhat.com/support/errata/RHSA-2004-378.html - http://www.gentoo.org/security/en/glsa/gls
rg/vuls/id/835846 - http://www.redhat.com/support/errata/RHSA-2004-378.html - http://www.gentoo.org/security/en/glsa/glsa-200407-08.xml
CVE ID: CVE-2004-0636 State: PUBLISHED Published: 2004-08-12T04:00:00 Last Updated: 2024-08-08T00:24:26.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/735966 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16926 - http://secunia.com/advisories/12198/ - http://www.idefense.com/application/poi/display?id=121&type=vulnerabilities
CVE ID: CVE-2004-0637 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T00:24:26.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload package, which is publicly accessible. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11099 - http://www.idefense.com/application/poi/display?id=136&type=vulnerabilities&flashstatus=true - http://www.kb.cert.org/vuls/id/316206 - http://secunia.com/advisories/12409/
CVE ID: CVE-2004-0638 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:24:26.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for Oracle 9i Database Server Release 2 9.2.0.3 and 9.2.0.4, 9i Release 1 9.0.1.4 and 9.0.1.5, and 8i Release 1 8.1.7.4, allows remote authorized users to execute arbitrary code via a long second argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17254 - http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf - http://www.idefense.com/application/poi/d
17254 - http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf - http://www.idefense.com/application/poi/display?id=135&type=vulnerabilities&flashstatus=false - http://www.securityfocus.com/bid/11100 - http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0178.html - http://www.red-database-security.com/advisory/advisory_20040903_3.htm
CVE ID: CVE-2004-0639 State: PUBLISHED Published: 2004-07-09T04:00:00 Last Updated: 2024-08-08T00:24:26.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via (1) the $mailer variable in read_body.php, (2) the $senderNames_part variable in mailbox_display.php, and possibly other vectors including (3) the $event_title variable or (4) the $event_text variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.rs-labs.com/adv/RS-Labs-Advisory-2004-1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16285
: - http://www.rs-labs.com/adv/RS-Labs-Advisory-2004-1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16285 - http://marc.info/?l=bugtraq&m=108611554415078&w=2 - http://www.debian.org/security/2004/dsa-535 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=257973 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858 - http://www.securityfocus.com/bid/10450
CVE ID: CVE-2004-0640 State: PUBLISHED Published: 2004-07-09T04:00:00 Last Updated: 2024-08-08T00:24:27.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the SSL_set_verify function in telnetd.c for SSLtelnet daemon (SSLtelnetd) 0.13 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16653 - http://www.idefense.com/application/poi/display?id=114&type=vulnerabilities - http://www.debian.org/security/2004/dsa-529
CVE ID: CVE-2004-0641 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T00:24:26.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16919 - http://www.auscert.org.au/render.html?it=4299 - http://www.securityfocus.com/bid/10881 - http://www.idefense.com/application/poi/display?id=120&type=vulnerabilities&flashstatus=true - http
ocus.com/bid/10881 - http://www.idefense.com/application/poi/display?id=120&type=vulnerabilities&flashstatus=true - http://secunia.com/advisories/12238/
CVE ID: CVE-2004-0642 State: PUBLISHED Published: 2004-09-10T04:00:00 Last Updated: 2024-08-08T00:24:26.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/795632 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10709 - http://rhn.redhat.com
0 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10709 - http://rhn.redhat.com/errata/RHSA-2004-350.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4936 - http://www.trustix.net/errata/2004/0045/ - http://www.debian.org/security/2004/dsa-543 - http://www.us-cert.gov/cas/techalerts/TA04-247A.html - http://www.gentoo.org/security/en/glsa/glsa-200409-09.xml - http://marc.info/?l=bugtraq&m=109508872524753&w=2 - http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt - http://www.securityfocus.com/bid/11078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17157
CVE ID: CVE-2004-0643 State: PUBLISHED Published: 2004-09-10T04:00:00 Last Updated: 2024-08-08T00:24:26.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and earlier may allow local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17159 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3322 - http://www.kb.cert.org/vuls/id/866472 - https://oval.cisecurity.org/repository/search/definition/