Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-1869 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Etherlords I 1.07 and earlier and Etherlords II 1.03 and earlier allows remote attackers to cause a denial of service (crash) by sending a packet that specifies the size for the next packet, then sending a larger packet than specified, which causes Etherlords to read unallocated memory. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108024309814423&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15618 - http://aluigi.altervista.org/adv/ethboom-adv.txt - http://www.secu
/exchange.xforce.ibmcloud.com/vulnerabilities/15618 - http://aluigi.altervista.org/adv/ethboom-adv.txt - http://www.securityfocus.com/bid/9979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15619
CVE ID: CVE-2004-1870 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' passwords via the (1) photo parameter to addfav.php, (2) photo parameter to comments.php, (3) credit parameter to comments.php, (4) cat parameter to index.php, (5) ppuser parameter to showgallery.php, (6) cat parameter to showgallery.php, (7) cat parameter to uploadphoto.php, (8) albumid parameter to useralbums.php, or (9) albumid parameter to useralbums.php. Additional Analyst Notes: - CVE Program Container: Ref
er to useralbums.php, or (9) albumid parameter to useralbums.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9994 - http://marc.info/?l=bugtraq&m=108057790723123&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15642 - http://securitytracker.com/id?1009571 - http://secunia.com/advisories/11241
CVE ID: CVE-2004-1871 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ppuser, (2) password, (3) stype, (4) perpage, (5) sort, (6) page, (7) si, or (8) cat parameters to showmembers.php, or the (9) photo name, (10) photo description, (11) album name, or (12) album description fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9994 - https://exchange.xforce.ibmcloud.com/vulnerabili
rogram Container: References: - http://www.securityfocus.com/bid/9994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15643 - http://marc.info/?l=bugtraq&m=108057790723123&w=2 - http://securitytracker.com/id?1009571 - http://www.gulftech.org/03282004.php - http://secunia.com/advisories/11241
CVE ID: CVE-2004-1872 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebCT Campus Edition 4.1.1.5 allows remote attackers to inject arbitrary web script or HTML via the @import URL function in a CSS style tag. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11242 - http://marc.info/?l=bugtraq&m=108057915916365&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15652 - http://www.securityfocus.com/bid/9999
CVE ID: CVE-2004-1873 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category.asp in A-CART Pro and A-CART 2.0 allows remote attackers to gain privileges via the catcode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108057887008983&w=2 - http://www.securityfocus.com/archive/1/452023/100/0/threaded - http://www.aria-security.com/forum/showthread.php?t=31 - http://secunia.com/advisories/11236 - http://www.securityfocus.com/archive/1/452005/100/0/threaded - http://www.securityfocus.com/archive/1/451594/100/1
236 - http://www.securityfocus.com/archive/1/452005/100/0/threaded - http://www.securityfocus.com/archive/1/451594/100/100/threaded - http://www.securityfocus.com/bid/9997 - http://www.securityfocus.com/archive/1/452006/100/0/threaded - http://s-a-p.ca/index.php?page=OurAdvisories&id=27 - http://www.aria-security.com/forum/showthread.php?t=32 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15661
CVE ID: CVE-2004-1874 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) deliver.asp and (2) billing.asp in A-CART Pro and A-CART 2.0 allow remote attackers to inject arbitrary web script or HTML via the user information forms. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108057887008983&w=2 - http://secunia.com/advisories/11236 - http://www.securityfocus.com/bid/9997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15660
CVE ID: CVE-2004-1875 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to testfile.html, (2) file parameter to erredit.html, (3) dns parameter to dnslook.html, (4) account parameter to ignorelist.html, (5) account parameter to showlog.html, (6) db parameter to repairdb.html, (7) login parameter to doaddftp.html (8) account parameter to editmsg.htm, or (9) ip parameter to del.html. NOTE: the dnslook.html vector was later reported to exist
unt parameter to editmsg.htm, or (9) ip parameter to del.html. NOTE: the dnslook.html vector was later reported to exist in cPanel 10. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4243 - http://marc.info/?l=bugtraq&m=108066561608676&w=2 - http://www.securityfocus.com/bid/21142 - http://secunia.com/advisories/11244 - http://www.osvdb.org/4215 - http://www.cirt.net/advisories/cpanel_xss.shtml - http://www.osvdb.org/4210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15671 - http://secunia.com/advisories/22984 - http://www.osvdb.org/4211 - http://www.vupen.com/english/advisories/2006/4658 - http://www.securityfocus.com/bid/10002 - http://www.osvd
.org/4211 - http://www.vupen.com/english/advisories/2006/4658 - http://www.securityfocus.com/bid/10002 - http://www.osvdb.org/4212 - http://www.osvdb.org/4208 - http://www.osvdb.org/4213 - http://www.osvdb.org/4214 - http://www.osvdb.org/4209 - http://www.aria-security.com/forum/showthread.php?t=30
CVE ID: CVE-2004-1876 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon (clamd) before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11253 - http://security.gentoo.org/glsa/glsa-200405-03.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/15692 - http://marc.info/?l=bugtraq&m=108066864608615&w=2 - http://www.securityfocus.com/bid/10007
CVE ID: CVE-2004-1877 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote attackers to spoof the login page, which could allow users to inadvertently reveal their username and password. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108067040722235&w=2 - http://www.securityfocus.com/bid/10009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15676
CVE ID: CVE-2004-1878 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: LINBOX LIN:BOX allows remote attackers to bypass authentication, obtain sensitive information, or gain access via a direct request to admin/user.pl preceded by // (double leading slash). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11264 - http://www.websec.org/adv/linbit.txt.html - http://www.securityfocus.com/bid/10010 - http://marc.info/?l=bugtraq&m=108067245401673&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15677
CVE ID: CVE-2004-1879 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows allows remote attackers to inject arbitrary web script or HTML via forum messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15681 - http://www.securityfocus.com/bid/10013 - http://marc.info/?l=bugtraq&m=108067894822358&w=2
CVE ID: CVE-2004-1880 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to cause a denial of service (memory consumption). Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000685 - http://www.osvdb.org/17000 - http://secunia.com/advisories/9203
CVE ID: CVE-2004-1881 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows remote attackers to execute arbitrary SQL commands via the strItems parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.s-quadra.com/advisories/Adv-20040331.txt - http://www.osvdb.org/4785 - http://www.osvdb.org/4786 - http://marc.info/?l=bugtraq&m=108075059013762&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15686 - http://www.securityfocus.com/bid/10019 - http://secunia.com/advisories/
ange.xforce.ibmcloud.com/vulnerabilities/15686 - http://www.securityfocus.com/bid/10019 - http://secunia.com/advisories/11272 - http://securitytracker.com/id?1009601
CVE ID: CVE-2004-1882 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in popuplargeimage.asp in CactuShop 5.x allows remote attackers to inject arbitrary web script or HTML via the strImageTag parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4787 - http://www.securityfocus.com/bid/10020 - http://marc.info/?l=bugtraq&m=108075059013762&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15687 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/019566.html - http://secunia.com/advisories/1127
s/15687 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/019566.html - http://secunia.com/advisories/11272 - http://securitytracker.com/id?1009601
CVE ID: CVE-2004-1883 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 (1) allow remote authenticated users to execute arbitrary code by causing a large error string to be generated by the ALLO handler, or (2) may allow remote FTP administrators to execute arbitrary code by causing a long hostname or username to be inserted into a reply to a STAT command while a file is being transferred. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11206 - http://www.securityfocus.com/bid/9953 - http://www
rogram Container: References: - http://secunia.com/advisories/11206 - http://www.securityfocus.com/bid/9953 - http://www.securityfocus.com/archive/1/358361 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15561 - http://marc.info/?l=bugtraq&m=108006553222397&w=2
CVE ID: CVE-2004-1884 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108006581418116&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15558 - http://secunia.com/advisories/11206 - http://www.securityfocus.com/bid/9953
CVE ID: CVE-2004-1885 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ipswitch WS_FTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify certain iFtpSvc options that are handled by iftpmgr.exe. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108006581418116&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15558 - http://secunia.com/advisories/11206 - http://www.securityfocus.com/bid/9953
CVE ID: CVE-2004-1886 State: REJECTED Published: 2005-05-10T04:00:00 Last Updated: 2008-05-02T09:00:00 Description: No description available.
CVE ID: CVE-2004-1887 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ada Image Server (ImgSvr) 0.4 allows remote attackers to view directories or download files via an HTTP request with a trailing %00 (null). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11277 - http://www.autistici.org/fdonato/advisory/imgSvr0.4-adv.txt - http://marc.info/?l=bugtraq&m=108083813528255&w=2 - http://sourceforge.net/project/shownotes.php?release_id=230023 - http://www.securityfocus.com/bid/10026 - http://www.securityfocus.com/bid/10027 - https://exchange.xforce.ibmc
=230023 - http://www.securityfocus.com/bid/10026 - http://www.securityfocus.com/bid/10027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15706
CVE ID: CVE-2004-1888 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: display.cgi in Aborior Encore WebForum allows remote to execute arbitrary commands via shell metacharacters in the file variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10040 - http://www.securityfocus.com/archive/1/437813/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/15725 - http://www.osvdb.org/16831 - http://www.securityfocus.com/archive/1/437978/100/0/threaded - http://marc.info/?l=bugtraq&m=108100973820868&w=2 - http://www.securitytracker.c
s.com/archive/1/437978/100/0/threaded - http://marc.info/?l=bugtraq&m=108100973820868&w=2 - http://www.securitytracker.com/id?1009652
CVE ID: CVE-2004-1889 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service (hang) via a link failure with Microsoft Windows. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10037 - ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/15722
CVE ID: CVE-2004-1890 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service (hang) via the PORT mode. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15723 - http://www.securityfocus.com/bid/10037 - ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc
CVE ID: CVE-2004-1891 State: PUBLISHED Published: 2005-05-10T04:00:00Z Last Updated: 2024-09-17T01:06:36.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ftp_syslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, possibly preventing the actions of anonymous users from being logged. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc
CVE ID: CVE-2004-1892 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web server in eMule 0.42d, allows remote attackers to execute arbitrary code via a long string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15730 - http://secunia.com/advisories/11289 - http://www.emule-project.net/home/perl/news.cgi?l=1&cat_id=22 - http://marc.info/?l=bugtraq&m=108100987429960&w=2
CVE ID: CVE-2004-1893 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dreamweaver MX, when "Using Driver On Testing Server" or "Using DSN on Testing Server" is selected, uploads the mmhttpdb.asp script to the web site but does not require authentication, which allows remote attackers to obtain sensitive information and possibly execute arbitrary SQL commands via a direct request to mmhttpdb.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108102481929451&w=2 - http://secunia.com/advisories/11284 - http://www.macromedia.com/devnet/security/securi
l=bugtraq&m=108102481929451&w=2 - http://secunia.com/advisories/11284 - http://www.macromedia.com/devnet/security/security_zone/mpsb04-05.html - http://www.securityfocus.com/bid/10036 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15721 - http://www.nextgenss.com/advisories/dreamweaver.txt
CVE ID: CVE-2004-1894 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: TEXutil in ConTEXt, when executed with the --silent option, allows local users to overwrite arbitrary files via a symlink attack on texutil.log. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1009661 - http://marc.info/?l=bugtraq&m=108118755923319&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15728 - http://www.securityfocus.com/bid/10042 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019777.html
CVE ID: CVE-2004-1895 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: YaST Online Update (YOU) in SuSE 8.2 and 9.0 allows local users to overwrite arbitrary files via a symlink attack on you-$USER/cookies. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108118395519164&w=2 - http://secunia.com/advisories/11300 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15731 - http://archives.neohapsis.com/archives/bugtraq/2004-04/0058.html - http://securitytracker.com/id?1009668 - http://www.osvdb.org/4985 - http://www.securityfocus.com/bid/10047
CVE ID: CVE-2004-1896 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4944 - http://www.nextgenss.com/advisories/winampheap.txt - http://securitytracker.com/id?1009660 - http://www.securityfocus.com/bid/10045 - http://marc.info/?l=bugtraq&m=108118289208693&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15727 - http://secunia.com/adv
o/?l=bugtraq&m=108118289208693&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15727 - http://secunia.com/advisories/11285
CVE ID: CVE-2004-1897 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fault) by sending a Basic Authentication request without a password, which causes Monit to decrement a null pointer and perform an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.tildeslash.com/monit/changes.html - http://www.securityfocus.com/bid/10051 - http://www.tildeslash.com/monit/secadv_20040305.txt - http://marc.info/?l=bugtraq&m=108119149103696&w=2 - http:
/10051 - http://www.tildeslash.com/monit/secadv_20040305.txt - http://marc.info/?l=bugtraq&m=108119149103696&w=2 - http://secunia.com/advisories/11304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15734
CVE ID: CVE-2004-1898 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username. Additional Analyst Notes: - CVE Program Container: References: - http://www.tildeslash.com/monit/changes.html - http://www.securityfocus.com/bid/10051 - http://www.tildeslash.com/monit/secadv_20040305.txt - http://marc.info/?l=bugtraq&m=108119149103696&w=2 - http://www.osvdb.org/4981 - http://secunia.com/advisories/11304 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
- http://www.osvdb.org/4981 - http://secunia.com/advisories/11304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15735 - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0076.html
CVE ID: CVE-2004-1899 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:49.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POST that contains 1024 bytes. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15736 - http://www.tildeslash.com/monit/changes.html - http://www.securityfocus.com/bid/10051 - http://www.tildeslash.com/monit/secadv_20040305.txt - http://marc.info/?l=bugtraq&m=108119149103696&w=2 - http://secunia.com/advisories/11304 - http://www.osvdb.org/4979 -
- http://marc.info/?l=bugtraq&m=108119149103696&w=2 - http://secunia.com/advisories/11304 - http://www.osvdb.org/4979 - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0076.html