Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-0543 State: PUBLISHED Published: 2004-06-10T04:00:00 Last Updated: 2024-08-08T00:24:25.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108638417302229&w=2 - http://www.us-cert.gov/cas/techalerts/TA04-160A.html - http://www.securityfocus.com/bid/10465 - http://www.integrigy.com/alerts/OraAppsSQLInjection.htm - http://www.kb.cert.org/vuls/id/961579 - https://exchange.xforce.ibmcloud
.integrigy.com/alerts/OraAppsSQLInjection.htm - http://www.kb.cert.org/vuls/id/961579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16324 - http://www.ciac.org/ciac/bulletins/o-153.shtml - http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0032.html - http://otn.oracle.com/deploy/security/pdf/2004alert67.pdf
CVE ID: CVE-2004-0544 State: PUBLISHED Published: 2004-06-10T04:00:00 Last Updated: 2024-08-08T00:24:25.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4392 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY55682 - http://www.securityfocus.com/bid/9906 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY55681 - http://secunia.com/advisories/11158/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18317 - http://www.securityfocus.com/bid/9905 - http:/
ies/11158/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18317 - http://www.securityfocus.com/bid/9905 - http://www.ciac.org/ciac/bulletins/o-131.shtml - http://www.osvdb.org/4393 - http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0544.2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15555
CVE ID: CVE-2004-0545 State: PUBLISHED Published: 2004-06-10T04:00:00 Last Updated: 2024-08-08T00:24:25.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16011 - http://www.ciac.org/ciac/bulletins/o-131.shtml - http://www.securityfocus.com/bid/10230 - http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0544.2
CVE ID: CVE-2004-0547 State: PUBLISHED Published: 2004-06-11T04:00:00 Last Updated: 2024-08-08T00:24:25.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ODBC driver for PostgreSQL before 7.2.1 allows remote attackers to cause a denial of service (crash). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16329 - http://www.debian.org/security/2004/dsa-516 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:072
CVE ID: CVE-2004-0548 State: PUBLISHED Published: 2004-06-11T04:00:00 Last Updated: 2024-08-08T00:24:25.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly handled when using the (1) "c" compress option or (2) "d" decompress option. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10497 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://www.gentoo.org/security/en/glsa/glsa-200406-14.xml - http://
twork/topics/security/bulletinjan2016-2867206.html - http://www.gentoo.org/security/en/glsa/glsa-200406-14.xml - http://marc.info/?l=bugtraq&m=108675120224531&w=2
CVE ID: CVE-2004-0549 State: PUBLISHED Published: 2004-06-15T04:00:00 Last Updated: 2024-08-08T00:24:25.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript, as demonstrated using (1) delayed HTTP redirect operations, and an HTTP response with a Location: header containing a "URL:" prepended to a "ms-its" protocol URI, or (2) modifying the location attribute of the window, as exploited b
ing a "URL:" prepended to a "ms-its" protocol URI, or (2) modifying the location attribute of the window, as exploited by the Download.ject (aka Scob aka Toofer) using the ADODB.Stream object. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA04-184A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16348 - http://62.131.86.111/analysis.htm - http://www.us-cert.gov/cas/techalerts/TA04-163A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1133 - http://www.kb.cert.org/vuls/id/713878 - http://m
y.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1133 - http://www.kb.cert.org/vuls/id/713878 - http://marc.info/?l=bugtraq&m=108786396622284&w=2 - http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0031.html - http://umbrella.name/originalvuln/msie/InsiderPrototype/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025 - http://www.us-cert.gov/cas/techalerts/TA04-212A.html - http://marc.info/?l=bugtraq&m=108852642021426&w=2 - http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0104.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A519 - https://oval.cisecurity.org/repository/search
urity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A519 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A241
CVE ID: CVE-2004-0550 State: PUBLISHED Published: 2004-06-15T04:00:00 Last Updated: 2024-08-08T00:24:26.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code via a URL with a large number of "." (period) characters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16388 - http://www.idefense.com/application/poi/display?id=109&type=vulnerabilities&flashstatus=false
CVE ID: CVE-2004-0551 State: PUBLISHED Published: 2004-06-15T04:00:00 Last Updated: 2024-08-08T00:24:26.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and reload) by sending invalid packets instead of the final ACK portion of the three-way handshake to the (1) Telnet, (2) HTTP, or (3) SSH services, aka "TCP-ACK DoS attack." Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/245190 - http://www.cisco.com/warp/public/707/cisco-sa-20040609-catos.shtml - https://exchan
p://www.kb.cert.org/vuls/id/245190 - http://www.cisco.com/warp/public/707/cisco-sa-20040609-catos.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/16370
CVE ID: CVE-2004-0552 State: PUBLISHED Published: 2004-09-28T04:00:00 Last Updated: 2024-08-08T00:24:25.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=143&type=vulnerabilities - http://www.seifried.org/security/advisories/kssa-005.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/
ties - http://www.seifried.org/security/advisories/kssa-005.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17468
CVE ID: CVE-2004-0554 State: PUBLISHED Published: 2004-06-15T04:00:00 Last Updated: 2024-08-08T00:24:26.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://www.kb.cert.org/vuls/id/973654 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9426 - http://www.debian.org
54 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9426 - http://www.debian.org/security/2006/dsa-1082 - http://www.redhat.com/support/errata/RHSA-2004-255.html - http://linuxreviews.org/news/2004-06-11_kernel_crash/index.html - http://www.securityfocus.com/bid/10538 - http://www.redhat.com/support/errata/RHSA-2004-260.html - http://gcc.gnu.org/bugzilla/show_bug.cgi?id=15905 - http://www.novell.com/linux/security/advisories/2004_17_kernel.html - http://www.trustix.net/errata/2004/0034/ - http://www.debian.org/security/2006/dsa-1070 - http://lwn.net/Articles/91155/ - http://secunia.com/advisories/20162 - http://marc.info/?l=bugtraq&m=108786114032681&w=
http://lwn.net/Articles/91155/ - http://secunia.com/advisories/20162 - http://marc.info/?l=bugtraq&m=108786114032681&w=2 - http://marc.info/?l=bugtraq&m=108793699910896&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845 - http://www.debian.org/security/2006/dsa-1067 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16412 - http://www.debian.org/security/2006/dsa-1069 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2915 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:062 - http://secunia.com/advisories/20202 - http://security.gentoo.org/glsa/glsa-200407-02.xml - http://marc.info/?l=linux-kernel&m=108681568931323&
isories/20202 - http://security.gentoo.org/glsa/glsa-200407-02.xml - http://marc.info/?l=linux-kernel&m=108681568931323&w=2 - http://secunia.com/advisories/20338
CVE ID: CVE-2004-0555 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-08T00:24:25.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in (1) queue.c and (2) queued.c in queue before 1.30.1 may allow remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012929 - http://www.debian.org/security/2005/dsa-643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18945
CVE ID: CVE-2004-0556 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0557 State: PUBLISHED Published: 2004-08-02T04:00:00 Last Updated: 2024-08-08T00:24:26.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-409.html - http://www.securityfocus.com/bid/10819 - https://bugzilla.fedora.us/show_bug.cgi?id=1945 - http://www.gentoo.org/security/en/glsa/glsa-200407-23.xml - https://oval.cisecurity.org/repository/search/definition/
- http://www.gentoo.org/security/en/glsa/glsa-200407-23.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9801 - http://secunia.com/advisories/12175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16827 - http://www.debian.org/security/2004/dsa-565 - http://lwn.net/Articles/95530/ - http://lwn.net/Articles/95529/ - http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0014.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:076 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000855 - http://seclists.org/fulldisclosure/2004/Jul/1227.html
CVE ID: CVE-2004-0558 State: PUBLISHED Published: 2004-09-17T04:00:00 Last Updated: 2024-08-08T00:24:26.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fibonascii/CVE-2004-0558 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11732 - http://www.suse.com/de/security/2004_31_cups.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000757.1-1 - http://www.security
/security/2004_31_cups.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000757.1-1 - http://www.securityfocus.com/bid/11183 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57646-1 - https://bugzilla.fedora.us/show_bug.cgi?id=2072 - http://www.debian.org/security/2004/dsa-545 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17389 - http://www.trustix.org/errata/2004/0047/ - http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html - http://marc.info/?l=bugtraq&m=109760654431316&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000872 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:097 - http://sunsolve.su
?id=a&anuncio=000872 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:097 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201005-1 - http://www.redhat.com/support/errata/RHSA-2004-449.html
CVE ID: CVE-2004-0559 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:24:25.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.webmin.com/uchanges-1.089.html - http://www.securityfocus.com/bid/11153 - http://secunia.com/advisories/12488/ - http://www.gentoo.org/security/en/glsa/glsa-200409-15.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17299
CVE ID: CVE-2004-0560 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:24:26.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted content of a certain size that triggers the overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13855 - http://www.debian.org/security/2004/dsa-638
CVE ID: CVE-2004-0561 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:24:25.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the log routine for gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13855 - http://www.debian.org/security/2004/dsa-638
CVE ID: CVE-2004-0562 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0563 State: PUBLISHED Published: 2004-11-19T05:00:00 Last Updated: 2024-08-08T00:24:26.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tspc.conf configuration file in freenet6 before 0.9.6 and before 1.0 on Debian Linux has world readable permissions, which could allow local users to gain sensitive information, such as a username and password. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-555 - http://www.securityfocus.com/bid/11280 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17544 - http://secunia.com/advisories/12705/ - http://securitytracker.com/id?1011460
CVE ID: CVE-2004-0564 State: PUBLISHED Published: 2004-11-19T05:00:00 Last Updated: 2024-08-08T00:24:25.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files. NOTE: the developer has publicly disputed the claim that this is a vulnerability because pppoe "is NOT designed to run setuid-root." Therefore this identifier applies *only* to those configurations and installations under which pppoe is run setuid root despite the developer's warnings. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&
the developer's warnings. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110253341209450&w=2 - http://www.securityfocus.com/bid/11315 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17576 - http://www.debian.org/security/2004/dsa-557 - http://www.fedoralegacy.org/updates/FC1/2005-11-14-FLSA_2005_152794__Updated_rp_pppoe_package_fixes_security_issue.html - http://marc.info/?l=bugtraq&m=110247119200510&w=2
CVE ID: CVE-2004-0565 State: PUBLISHED Published: 2004-07-08T04:00:00 Last Updated: 2024-08-08T00:24:25.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html - http://www.debian.org/security/2006/dsa-1082 - http://www.debian.org/security/2006/dsa-1070 - http://secunia.com/advisories/20162 - ht
ian.org/security/2006/dsa-1082 - http://www.debian.org/security/2006/dsa-1070 - http://secunia.com/advisories/20162 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10714 - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - http://www.securityfocus.com/bid/10687 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124734 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:066 - http://secunia.com/advisories/20202 - http://www.redhat.com/support/errata/RHSA-2004-504.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16644 - http://secunia.com/advisories/20338
CVE ID: CVE-2004-0566 State: PUBLISHED Published: 2004-07-21T04:00:00 Last Updated: 2024-08-08T00:24:25.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A216 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A322 - http://www.kb.cert.org/vuls/id/266926 - http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0806.html - https://oval.cisecurity
t.org/vuls/id/266926 - http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0806.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A306 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A515 - http://www.us-cert.gov/cas/techalerts/TA04-212A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A507 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15210
CVE ID: CVE-2004-0567 State: PUBLISHED Published: 2004-12-31T05:00:00 Last Updated: 2024-08-08T00:24:26.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute arbitrary code or cause a denial of service (server crash), which results in an "unchecked buffer" and possibly triggers a buffer overflow, aka the "Name Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.
ka the "Name Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13466 - http://www.kb.cert.org/vuls/id/378160 - http://securitytracker.com/id?1012517 - http://www.osvdb.org/12370 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18259 - http://www.securityfocus.com/bid/11922 - http://www.ciac.org/ciac/bulletins/p-054.shtml - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-045
CVE ID: CVE-2004-0568 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:24:26.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value that is saved in a session file, which allows remote attackers to execute arbitrary code via a malicious HyperTerminal session file (.ht), web site, or Telnet URL contained in an e-mail message, triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18336 - https://oval.cisecurity.org/reposito
ntainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18336 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4741 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3973 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-043 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3138 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2545 - http://marc.info/?l=bugtraq&m=110312618614849&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4508 - https://ov
618614849&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4508 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1603
CVE ID: CVE-2004-0569 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:24:25.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of service (system crash) via a malicious message, possibly related to improper length values. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2505 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17646 - https:
arch/definition/oval%3Aorg.mitre.oval%3Adef%3A5277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17646 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17663 - http://marc.info/?l=bugtraq&m=109769394209518&w=2