Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
http://www.securityfocus.com/bid/11266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17539 - http://secunia.com/advisories/12684/ - http://www.gulftech.org/?node=research&article_id=00052-09272004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17535
CVE ID: CVE-2004-1570 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute arbitrary SQL commands via the p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109665351632048&w=2 - http://secunia.com/advisories/12691 - http://www.securityfocus.com/bid/11303 - http://www.servers.co.nz/security/SCN200409-1.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/17552
CVE ID: CVE-2004-1571 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: AJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to (1) auto-acronyms.php, (2) auto-archive.php, (3) ount-article-views.php, (4) kses.php, (5) custom-quick-tags.php, (6) disable-all-comments.php, (7) easy-date-format.php, (8) enable-disable-comments.php, (9) filter-by-author.php, (10) format-switcher.php, (11) long-to-short.php, (12) prospective-posting.php, or (13) sort-by-xfield.php, which displays the full path in an error message. Additional Analyst Notes: - CVE Program Container: Refe
by-xfield.php, which displays the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17568 - http://echo.or.id/adv/adv07-y3dips-2004.txt - http://marc.info/?l=bugtraq&m=109664986210763&w=2
CVE ID: CVE-2004-1572 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: AJ-Fork 167 does not restrict access to directories such as (1) data, (2) inc, (3) plugins, (4) skins, or (5) tools, which allows remote attackers to list files in those directories via a direct HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11301 - http://securitytracker.com/id?1011484 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17569 - http://echo.or.id/adv/adv07-y3dips-2004.txt - http://marc.info/?l=bugtraq&m=109664986210763&w=2
CVE ID: CVE-2004-1573 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11301 - http://securitytracker.com/id?1011484 - http://echo.or.id/adv/adv07-y3dips-2004.txt - http://marc.info/?l=bugtraq&m=109664986210763&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17571
CVE ID: CVE-2004-1574 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Vypress Messenger 3.5.1 and earlier allows remote attackers to execute arbitrary code via a message with a long first field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11310 - http://secunia.com/advisories/12605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17572 - http://securitytracker.com/id?1011489 - http://aluigi.altervista.org/adv/vymesbof-adv.txt - http://www.osvdb.org/10451 - http://marc.info/?l=bugtraq&m=109665993315769&w=2
CVE ID: CVE-2004-1575 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU consumption) via XML attributes in a crafted XML document. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109674050017645&w=2 - http://secunia.com/advisories/12715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17575 - http://www.securityfocus.com/bid/11312
CVE ID: CVE-2004-1576 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Judge Dredd: Dredd vs. Death 1.01 and earlier allows remote attackers to cause a denial of service (application crash) via format string specifiers in a chat message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17579 - http://secunia.com/advisories/12710 - http://marc.info/?l=bugtraq&m=109674541519610&w=2
CVE ID: CVE-2004-1577 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in PHP Links allows remote attackers to gain sensitive information via an invalid show parameter, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109693280416747&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17588
CVE ID: CVE-2004-1578 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute arbitrary web script or HTML via the Referer field in the HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12740 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17604 - http://www.securityfocus.com/bid/11332 - http://marc.info/?l=bugtraq&m=109701091207517&w=2
CVE ID: CVE-2004-1579 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid cat_id parameter, which reveals the full path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109713382400457&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17630
CVE ID: CVE-2004-1580 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109713382400457&w=2 - http://www.securityfocus.com/bid/11337 - http://secunia.com/advisories/12764 - http://www.exploit-db.com/exploits/15278 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17632
CVE ID: CVE-2004-1581 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2) admin.inc.php or (3) cp.inc.php, which reveals the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17636 - http://marc.info/?l=bugtraq&m=109707701719659&w=2
CVE ID: CVE-2004-1582 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in BlackBoard 1.5.1 allows remote attackers to execute arbitrary PHP code by modifying the libpath parameter (incorrectly called "libpach") to reference a URL on a remote web server that contains _more.php, as demonstrated using checkdb.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17637 - http://blackboard.unclassified.de/70%2C1#1031 - http://www.securityfocus.com/bid/11336 - http://marc.info/?l=bugtraq&m=1
http://blackboard.unclassified.de/70%2C1#1031 - http://www.securityfocus.com/bid/11336 - http://marc.info/?l=bugtraq&m=109707701719659&w=2 - http://secunia.com/advisories/12757
CVE ID: CVE-2004-1583 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the FTP server in TriDComm 1.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in FTP commands such as (1) DIR, (2) GET, or (3) PUT. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12755 - http://www.securityfocus.com/bid/11343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17631 - http://marc.info/?l=bugtraq&m=109709637732276&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/0
- http://marc.info/?l=bugtraq&m=109709637732276&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027195.html
CVE ID: CVE-2004-1584 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the text parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109716327724041&w=2 - http://www.securityfocus.com/bid/11348 - http://secunia.com/advisories/12773 - http://wordpress.org/development/2004/10/wp-121/ - http://www.gentoo.org/security/en/glsa/glsa-200410-12.xml - https://exchange.xforce.
s.org/development/2004/10/wp-121/ - http://www.gentoo.org/security/en/glsa/glsa-200410-12.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17649
CVE ID: CVE-2004-1585 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flash Messaging 5.2.0g (rev 1.1.2) and earlier allows remote attackers to cause a denial of service (application crash) via certain wide characters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17647 - http://marc.info/?l=bugtraq&m=109716787607302&w=2 - http://securitytracker.com/id?1011569 - http://secunia.com/advisories/12759/ - http://www.securityfocus.com/bid/11351
CVE ID: CVE-2004-1586 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flash Messaging clients can ignore disconnecting commands such as "shutdown" from the Flash Messaging Server 5.2.0g (rev 1.1.2), which could allow remote attackers to stay connected. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109716787607302&w=2 - http://securitytracker.com/id?1011569 - http://secunia.com/advisories/12759/
CVE ID: CVE-2004-1587 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Monolith games including (1) Alien versus Predator 2 1.0.9.6 and earlier, (2) Blood 2 2.1 and earlier, (3) No one lives forever 1.004 and earlier and (4) Shogo 2.2 and earlier allows remote attackers to cause a denial of service (application crash) via a long secure Gamespy query. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11354 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17670 - http://marc.info/?l=bugtraq&m=109728194025487&w=2 - http://marc.
://exchange.xforce.ibmcloud.com/vulnerabilities/17670 - http://marc.info/?l=bugtraq&m=109728194025487&w=2 - http://marc.info/?l=full-disclosure&m=109727077824860&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17669 - http://secunia.com/advisories/12776/ - http://securitytracker.com/alerts/2004/Oct/1011603.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17665 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17668 - http://www.osvdb.org/displayvuln.php?osvdb_id=10635
CVE ID: CVE-2004-1588 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in GoSmart Message Board allows remote attackers to execute arbitrary SQL code via the (1) QuestionNumber and Category parameters to Forum.asp or (2) Username and Password parameter to Login_Exec.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17678 - http://marc.info/?l=bugtraq&m=109751522823011&w=2 - http://www.securityfocus.com/bid/11361 - http://secunia.com/advisories/12790/
CVE ID: CVE-2004-1589 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in GoSmart Message Board allows remote attackers to execute inject web script or HTML via the (1) Category parameter to Forum.asp or (2) MainMessageID parameter to ReplyToQuestion.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17679 - http://marc.info/?l=bugtraq&m=109751522823011&w=2 - http://www.securityfocus.com/bid/11361 - http://secunia.com/advisories/12790/
CVE ID: CVE-2004-1590 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clientexec allows remote attackers to gain sensitive information via an HTTP request to phpinfo.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17741 - http://secunia.com/advisories/12862 - http://marc.info/?l=bugtraq&m=109787365801512&w=2
CVE ID: CVE-2004-1591 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface for Micronet Wireless Broadband Router SP916BM running firmware before 1.9 08/04/2004 resets the password to the default password when the router is shut off, which could allow remote attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17697 - http://marc.info/?l=bugtraq&m=109759963126161&w=2
CVE ID: CVE-2004-1592 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in ocPortal 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the req_path parameter to reference a URL on a remote web server that contains a malicious funcs.php script. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12811/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/17699 - http://www.hackgen.org/advisories/hackgen-2004-002.txt - http://www.securityfocus.com/bid/11368 - http://mar
ies/17699 - http://www.hackgen.org/advisories/hackgen-2004-002.txt - http://www.securityfocus.com/bid/11368 - http://marc.info/?l=bugtraq&m=109763314312828&w=2
CVE ID: CVE-2004-1593 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in render.UserLayoutRootNode.uP in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via the utf parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17704 - http://marc.info/?l=bugtraq&m=109768337007983&w=2 - http://secunia.com/advisories/12826 - http://www.securityfocus.com/bid/11392
CVE ID: CVE-2004-1594 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T00:53:24.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in FuseTalk 4.0 allows remote attackers to execute arbitrary web script via an img src tag. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109768460312168&w=2 - http://www.securityfocus.com/bid/11393 - http://secunia.com/advisories/12823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17701
CVE ID: CVE-2004-1595 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:35.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12822/ - http://www.securityfocus.com/bid/11409 - http://marc.info/?l=bugtraq&m=109778648232233&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17705
CVE ID: CVE-2004-1596 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 3COM Wireless router 3CRADSL72 running Boot Code 1.3d allows remote attackers to gain sensitive information such as passwords and router settings via a direct HTTP request to app_sta.stm. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17723 - http://marc.info/?l=bugtraq&m=109810854031673&w=2 - http://www.securityfocus.com/bid/11408 - http://marc.info/?l=bugtraq&m=109778914829901&w=2 - http://www.securityfocus.com/archive/1/378551
CVE ID: CVE-2004-1597 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: RIM Blackberry 7230 running RIM Blackberry OS 3.7 SP1 allows remote attackers to cause a denial of service (device reboot and possibly data corruption) via a calendar message with a long Location field, which triggers a watchdog while the message is being stored. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027487.html - http://secunia.com/advisories/12814 - http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/7925/8142/
//secunia.com/advisories/12814 - http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/7925/8142/Known_%20Issues_-_HexView_advisory_on_BlackBerry_buffer_overflow%2C_DoS%2C_and_data_loss.html?nodeid=737173&vernum=0 - http://marc.info/?l=bugtraq&m=109778267829493&w=2 - http://www.hexview.com/docs/20041012-1.txt - http://marc.info/?l=bugtraq&m=109769022430842&w=2 - http://www.securityfocus.com/bid/11389 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17700
CVE ID: CVE-2004-1598 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:35.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat and Acrobat Reader 6.0 allow remote attackers to read arbitrary files via a PDF file that contains an embedded Shockwave (swf) file that references files outside of the temporary directory. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109812210520520&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17694 - http://marc.info/?l=bugtraq&m=109779541602447&w=2 - http://www.securityfocus.com/bid/11386 - http://marc.info/?l=bugtraq&m=109771686326956&w=2
CVE ID: CVE-2004-1599 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to execute arbitrary web script or HTML via the (1) query or (2) nick parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17742 - http://www.securityfocus.com/bid/11437 - http://marc.info/?l=bugtraq&m=109810941419669&w=2 - http://securitytracker.com/id?1011748
CVE ID: CVE-2004-1600 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in CoolPHP 1.0-stable allows remote attackers to gain sensitive information via an invalid op parameter, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17744 - http://marc.info/?l=bugtraq&m=109810941419669&w=2 - http://securitytracker.com/id?1011748
CVE ID: CVE-2004-1601 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files and execute local PHP scripts via a .. (dot dot) in the op parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12850 - http://www.securityfocus.com/bid/11437 - http://marc.info/?l=bugtraq&m=109810941419669&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17745 - http://securitytracker.com/id?1011748
CVE ID: CVE-2004-1602 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid usernames by timing the server response. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1011687 - http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02 - http://www.securityfocus.com/bid/11430 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17724 - http://marc.info/?l=bugtraq&m=109786760926133&w=2
CVE ID: CVE-2004-1603 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17780 - http://marc.info/?l=bugtraq&m=109811572123753&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17779 - http://marc.info/?l=bugtraq&m=109811654104208&w=2 - http://www.securi
change.xforce.ibmcloud.com/vulnerabilities/17779 - http://marc.info/?l=bugtraq&m=109811654104208&w=2 - http://www.securityfocus.com/bid/11455 - http://secunia.com/advisories/12865 - http://www.securityfocus.com/bid/11449
CVE ID: CVE-2004-1604 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel 9.9.1-RELEASE-3 allows remote authenticated users to chmod arbitrary files via a symlink attack on the _private directory, which is created when Front Page extensions are enabled. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109811762230326&w=2