Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e.oval%3Adef%3A1066 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1062 - http://www.ciac.org/ciac/bulletins/o-115.shtml - http://secunia.com/advisories/11065/ - http://www.securityfocus.com/bid/10121 - http://www.us-cert.gov/cas/techalerts/TA04-104A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-012 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1072 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15711 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1041
CVE ID: CVE-2004-0125 State: PUBLISHED Published: 2004-06-23T04:00:00 Last Updated: 2024-08-08T00:10:03.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16342 - http://www.securityfocus.com/bid/10485 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:12.jailroute.asc
CVE ID: CVE-2004-0126 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:10:03.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jail_attach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local users to gain read/write privileges to files and directories within another jail. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9762 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:03.jail.asc - http://www.osvdb.org/4101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15344
CVE ID: CVE-2004-0127 State: PUBLISHED Published: 2004-02-04T05:00:00 Last Updated: 2024-08-08T00:10:03.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to read arbitrary files or execute arbitrary PHP programs on the server via .. (dot dot) sequences in the gedcom_config parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/displayvuln.php?osvdb_id=3768 - http://www.securityfocus.com/bid/9529 - http://www.securitytracker.com/id?1008892 - http://www.securityfocus.com/archive/1/352355 - http://secunia.com/advisories/1075
/www.securitytracker.com/id?1008892 - http://www.securityfocus.com/archive/1/352355 - http://secunia.com/advisories/10753/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/15129
CVE ID: CVE-2004-0128 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:10:03.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains a malicious theme.php script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/352355 - http://secunia.com/advisories/10753/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/14987 - http://www.securityfocus
://secunia.com/advisories/10753/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/14987 - http://www.securityfocus.com/bid/9531 - http://sourceforge.net/project/shownotes.php?release_id=141517 - http://www.osvdb.org/3769
CVE ID: CVE-2004-0129 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:10:03.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in the what parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/relnotes.php?rel=0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15021 - http://security.gentoo.org/glsa/glsa-200402-05.xml - http://secunia.com/advisories/10769 - http://www.osvdb.org/3800 - http://marc.info/?l=bugtraq&m=107582619125932&w=2 -
- http://secunia.com/advisories/10769 - http://www.osvdb.org/3800 - http://marc.info/?l=bugtraq&m=107582619125932&w=2 - http://www.securityfocus.com/bid/9564 - http://sourceforge.net/forum/forum.php?forum_id=350228
CVE ID: CVE-2004-0130 State: PUBLISHED Published: 2004-02-04T05:00:00 Last Updated: 2024-08-08T00:10:02.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP request to login.php that does not contain the required username or password parameters, which causes the information to be leaked in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/alerts/2004/Jan/1008844.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15128 - http://www.securiteam.com/unixfocus/5NP0M1PBPQ.html - http://www.osvdb.org/6886 - http:
loud.com/vulnerabilities/15128 - http://www.securiteam.com/unixfocus/5NP0M1PBPQ.html - http://www.osvdb.org/6886 - http://www.netvigilance.com/advisory0001
CVE ID: CVE-2004-0131 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:10:03.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP packet with an Acct-Status-Type attribute without a value and no Acct-Session-Id attribute, which causes a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=71&type=vulnerabilities&flashstatus=true - http://ftp.gnu.org/gnu/radius/radius-1.2.tar.gz - http://www.kb.cert.org/vuls/id/277396 - h
abilities&flashstatus=true - http://ftp.gnu.org/gnu/radius/radius-1.2.tar.gz - http://www.kb.cert.org/vuls/id/277396 - http://www.osvdb.org/3824 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15046 - http://www.securityfocus.com/bid/9578 - http://secunia.com/advisories/10799
CVE ID: CVE-2004-0132 State: PUBLISHED Published: 2004-02-14T05:00:00 Last Updated: 2024-08-08T00:10:02.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote attackers to execute arbitrary PHP code from a remote web server, as demonstrated using (1) the GLOBALS[rootdp] parameter to db.php, or (2) the GLOBALS[language_home] parameter to archivednews.php, and a malicious version of lang_admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107651585921958&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15135
CVE ID: CVE-2004-0133 State: PUBLISHED Published: 2004-04-17T04:00:00 Last Updated: 2024-08-08T00:10:03.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the XFS file system, which allows local users to obtain sensitive information by reading the raw device. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20040405-01-U.asc - http://marc.info/?l=bugtraq&m=108213675028441&w=2 - http://secunia.com/advisories/11362 - http://www.securityfocus.com/bid/10151 - https://exchange.xforce.ibmcloud.com/vu
- http://secunia.com/advisories/11362 - http://www.securityfocus.com/bid/10151 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15901 - http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:029 - http://security.gentoo.org/glsa/glsa-200407-02.xml
CVE ID: CVE-2004-0134 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T00:10:03.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: cpr (libcpr) in SGI IRIX before 6.5.25 allows local users to gain privileges by loading a user provided library while restarting the checkpointed process. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20040507-01-P.asc - http://www.securityfocus.com/bid/10418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16259
CVE ID: CVE-2004-0135 State: PUBLISHED Published: 2004-06-23T04:00:00 Last Updated: 2024-08-08T00:10:03.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: The syssgi SGI_IOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain privileges by reading and writing to kernel memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/7122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16413 - ftp://patches.sgi.com/support/free/security/advisories/20040601-01-P.asc - http://secunia.com/advisories/11872
CVE ID: CVE-2004-0136 State: PUBLISHED Published: 2004-06-23T04:00:00 Last Updated: 2024-08-08T00:10:03.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system crash) via a "corrupted binary." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16416 - http://www.osvdb.org/7123 - http://www.securityfocus.com/bid/10547 - ftp://patches.sgi.com/support/free/security/advisories/20040601-01-P.asc - http://secunia.com/advisories/11872
CVE ID: CVE-2004-0137 State: PUBLISHED Published: 2004-06-23T04:00:00 Last Updated: 2024-08-08T00:10:03.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in init for IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system panic) as a result of "page invalidation issues." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16417 - ftp://patches.sgi.com/support/free/security/advisories/20040601-01-P.asc - http://secunia.com/advisories/11872 - http://www.osvdb.org/7124
CVE ID: CVE-2004-0138 State: PUBLISHED Published: 2006-05-31T10:00:00 Last Updated: 2024-08-08T00:10:03.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ELF loader in Linux kernel 2.4 before 2.4.25 allows local users to cause a denial of service (crash) via a crafted ELF file with an interpreter with an invalid arch (architecture), which triggers a BUG() when an invalid VMA is unmapped. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.25 - http://www.debian.org/security/2006/dsa-1082 - http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.1
w.debian.org/security/2006/dsa-1082 - http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes - https://exchange.xforce.ibmcloud.com/vulnerabilities/43124 - http://www.debian.org/security/2006/dsa-1070 - http://secunia.com/advisories/20162 - http://www.securityfocus.com/bid/18174 - http://www.redhat.com/support/errata/RHSA-2004-549.html - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - http://secunia.com/advisories/20202 - http://www.redhat.com/support/errata/RHSA-2004-504.html - http://linux.bkbits.net:8080/linux-2.4/cset%404021346f79nBb-4X_usRikR3Iyb4Vg - https://oval.cisecurity.org/reposi
html - http://linux.bkbits.net:8080/linux-2.4/cset%404021346f79nBb-4X_usRikR3Iyb4Vg - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10123 - http://secunia.com/advisories/20338
CVE ID: CVE-2004-0139 State: PUBLISHED Published: 2004-12-08T05:00:00 Last Updated: 2024-08-08T00:10:03.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and possibly earlier versions, in which "t_unbind changes t_bind's behavior," has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17547 - ftp://patches.sgi.com/support/free/security/advisories/20040905-01-P.asc - http://secunia.com/advisories/12682 - http://www.securityfocus.com/bid/11276
CVE ID: CVE-2004-0140 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0141 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0142 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0143 State: PUBLISHED Published: 2004-02-14T05:00:00 Last Updated: 2024-08-08T00:10:03.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in Nokia 6310(i) Mobile phones allow remote attackers to cause a denial of service (reset) via malformed Bluetooth OBject EXchange (OBEX) messages, probably triggering buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - http://www.pentest.co.uk/documents/ptl-2004-01.html - http://www.securityfocus.com/bid/9603 - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0034.html - http://marc.info/?l=bugtraq&m=107634788029065&w=2 - https://exchange.xforce.ibmcloud.com/vuln
nwatch/2004-q1/0034.html - http://marc.info/?l=bugtraq&m=107634788029065&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15107
CVE ID: CVE-2004-0144 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0145 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0146 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0147 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0148 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:10:03.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15423 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1637 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102356-1 - h
ch/definition/oval%3Aorg.mitre.oval%3Adef%3A1637 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102356-1 - http://www.debian.org/security/2004/dsa-457 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1147 - http://secunia.com/advisories/11055 - http://secunia.com/advisories/20168 - http://marc.info/?l=bugtraq&m=108999466902690&w=2 - http://www.securityfocus.com/bid/9832 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A648 - http://www.redhat.com/support/errata/RHSA-2004-096.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1636 - http://www.frsirt.com/englis
tps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1636 - http://www.frsirt.com/english/advisories/2006/1867
CVE ID: CVE-2004-0149 State: PUBLISHED Published: 2004-03-25T05:00:00 Last Updated: 2024-08-08T00:10:03.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in xboing before 2.4 allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15347 - http://www.securityfocus.com/bid/9764 - http://www.debian.org/security/2004/dsa-451
CVE ID: CVE-2004-0150 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:10:03.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arbitrary code via an IPv6 address that is obtained using DNS. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9836 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:019 - http://www.osvdb.org/4172 - http://www.gentoo.org/security/en/glsa/glsa-200409-03.xml - http://www.debian.org/security/2004/dsa-458 - https://exchange.xforc
ww.gentoo.org/security/en/glsa/glsa-200409-03.xml - http://www.debian.org/security/2004/dsa-458 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15409
CVE ID: CVE-2004-0151 State: PUBLISHED Published: 2004-03-23T05:00:00 Last Updated: 2024-08-08T00:10:03.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in xitalk 1.1.11 and earlier allows local users to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11114/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/15456 - http://www.securityfocus.com/bid/9851 - http://shellcode.org/Advisories/XITALK.txt - http://www.debian.org/security/2004/dsa-462
CVE ID: CVE-2004-0152 State: PUBLISHED Published: 2004-03-27T05:00:00 Last Updated: 2024-08-08T00:10:03.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in (1) the encode_mime function, (2) the encode_uuencode function, (3) or the decode_uuencode function for emil 2.1.0 and earlier allow remote attackers to execute arbitrary code via e-mail messages containing attachments with filenames. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15601 - http://www.debian.org/security/2004/dsa-468 - http://marc.info/?l=bugtraq&m=108024939827236&w=2
CVE ID: CVE-2004-0153 State: PUBLISHED Published: 2004-03-27T05:00:00 Last Updated: 2024-08-08T00:10:03.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in emil 2.1.0 and earlier may allow remote attackers to execute arbitrary code by triggering certain error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-468 - http://marc.info/?l=bugtraq&m=108024939827236&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15602
CVE ID: CVE-2004-0154 State: PUBLISHED Published: 2004-05-12T04:00:00 Last Updated: 2024-08-08T00:10:02.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.org/errata/misc/2004/TSL-2004-0009-nfs-utils.asc.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9673 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
efinition/oval%3Aorg.mitre.oval%3Adef%3A9673 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A861 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15418 - http://www.securityfocus.com/bid/9813 - http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535 - http://www.redhat.com/support/errata/RHSA-2004-072.html
CVE ID: CVE-2004-0155 State: PUBLISHED Published: 2004-04-16T04:00:00 Last Updated: 2024-08-08T00:10:03.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2004:027 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:069 - http://marc.inf
ies?name=MDKSA-2004:027 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:069 - http://marc.info/?l=bugtraq&m=108369640424244&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9291 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt - http://www.gentoo.org/security/en/glsa/glsa-200406-17.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A945 - http://secunia.com/advisories/11328 - http://www.kb.cert.org/vuls/id/552398 - http://www.redhat.com/support/errata/RHSA-2004-165.html - http://www.securityfocus.com/bid/10072 - http://marc.info/?l=bugtraq&m=108136746911000&
port/errata/RHSA-2004-165.html - http://www.securityfocus.com/bid/10072 - http://marc.info/?l=bugtraq&m=108136746911000&w=2
CVE ID: CVE-2004-0156 State: PUBLISHED Published: 2004-04-17T04:00:00 Last Updated: 2024-08-08T00:10:03.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before 2.50.6 allow remote mail relays to cause a denial of service and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11571 - http://www.debian.org/security/2004/dsa-485 - http://marc.info/?l=bugtraq&m=108403772130855&w=2 - http://secunia.com/advisories/11384 - http://securitytracker.com/id?1009788 - http://secunia.com/advisories/11378 - http://www.osvdb.org/5360 -
ories/11384 - http://securitytracker.com/id?1009788 - http://secunia.com/advisories/11378 - http://www.osvdb.org/5360 - http://www.osvdb.org/5361 - http://www.securityfocus.com/bid/10150 - http://security.gentoo.org/glsa/glsa-200404-18.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/15872 - http://secunia.com/advisories/11485
CVE ID: CVE-2004-0157 State: PUBLISHED Published: 2004-04-17T04:00:00 Last Updated: 2024-08-08T00:10:03.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a malicious rmail program. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1009789 - http://shellcode.org/Advisories/XONIX.txt - http://www.securityfocus.com/bid/10149 - http://www.debian.org/security/2004/dsa-484 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15873 - http://www.osvdb.o
//www.debian.org/security/2004/dsa-484 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15873 - http://www.osvdb.org/5358 - http://secunia.com/advisories/11382