Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-2492 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web (GmaxWWW) Desktop 5, 6, and Desktop for Jichitai 6, allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi-support.com/security_e/vuls_e/HS04-007_e/01-e.html - http://www.osvdb.org/12154 - http://secunia.com/advisories/13321 - http://www.securityfocus.com/bid/11773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18277
CVE ID: CVE-2004-2493 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichitai allows remote authenticated users to read arbitrary .html files via the template name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi-support.com/security_e/vuls_e/HS04-007_e/01-e.html - http://www.osvdb.org/12153 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18278 - http://secunia.com/advisories/13321 - http://www.securityfocus.com/bid/11773
CVE ID: CVE-2004-2494 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in _error in Ability Mail Server 1.18 allows remote attackers to inject arbitrary web script or HTML via the erromsg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12039 - http://www.securityfocus.com/bid/10695 - http://securitytracker.com/id?1010672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16676 - http://www.osvdb.org/7718 - http://members.lycos.co.uk/r34ct/main/Ability_mail_server_1.18.txt
CVE ID: CVE-2004-2495 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Webmail, (2) admin, and (3) SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous connections to the service. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16677 - http://www.securityfocus.com/bid/10695 - http://securitytracker.com/id?1010672 - http://www.osvdb.org/7719 - http://members.lycos.co.uk/r34ct/main/Ability_ma
5 - http://securitytracker.com/id?1010672 - http://www.osvdb.org/7719 - http://members.lycos.co.uk/r34ct/main/Ability_mail_server_1.18.txt
CVE ID: CVE-2004-2496 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service (service availability loss) via a large number of POST requests to /Search. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0321.html - http://www.osvdb.org/12350 - http://secunia.com/advisories/13415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18424 - http://www.securityfocus.com/bid/11877 - http://securitytracker.com/id?1012478
CVE ID: CVE-2004-2497 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10818 - http://secunia.com/advisories/12150 - http://www.osvdb.org/8264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16822
://secunia.com/advisories/12150 - http://www.osvdb.org/8264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16822 - http://www.hitachi-support.com/security_e/vuls_e/HS04-003_e/index-e.html
CVE ID: CVE-2004-2498 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:14.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to determine internal directory structures via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10818 - http://secunia.com/advisories/12150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16822 - http://www.osvdb.org/8263 - http://w
com/advisories/12150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16822 - http://www.osvdb.org/8263 - http://www.hitachi-support.com/security_e/vuls_e/HS04-003_e/index-e.html
CVE ID: CVE-2004-2499 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier allows remote attackers to cause a denial of service via unknown attack vectors when a web site is "improperly accessed." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12150 - http://www.securityfocus.com/bid/10817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16821 - http://www.hitachi-support.com/security_e/vuls_e/HS04-002_e/index-e.html - http://www.osvdb.org/82
lnerabilities/16821 - http://www.hitachi-support.com/security_e/vuls_e/HS04-002_e/index-e.html - http://www.osvdb.org/8262
CVE ID: CVE-2004-2500 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in IlohaMail before 0.8.14-rc1 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11872 - http://secunia.com/advisories/13413 - http://www.osvdb.org/12292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18426 - http://sourceforge.net/project/shownotes.php?group_id=54027&release_id=288409
CVE ID: CVE-2004-2501 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute arbitrary code via (1) a long command string or (2) a long string to the MEIMAP service and then terminating the connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/12136 - http://secunia.com/advisories/13318 - http://securitytracker.com/id?1012327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18286 - http://www.securityfocus.com/bid/11
racker.com/id?1012327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18286 - http://www.securityfocus.com/bid/11755 - http://www.osvdb.org/12135 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18285 - http://www.hat-squad.com/en/000102.html - http://archives.neohapsis.com/archives/bugtraq/2004-11/0349.html
CVE ID: CVE-2004-2502 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16682 - http://www.securityfocus.com/bid/10717 - http://packetstormsecurity.org/0407-advisories/fedora_im-switch_tempfile_race.txt - http://secunia.com/advisories/12037 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=126940 - http://www.osvdb.org/7772
CVE ID: CVE-2004-2503 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: INweb Mail Server 2.40 allows remote attackers to cause a denial of service (crash) via a large number of connect/disconnect actions to the (1) POP3 and (2) SMTP services. Additional Analyst Notes: - CVE Program Container: References: - http://members.lycos.co.uk/r34ct/main/inwebmail.txt - http://www.osvdb.org/7770 - http://secunia.com/advisories/12056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16683 - http://securitytracker.com/id?1010680 - http://www.securityfocus.com/bid/10719
CVE ID: CVE-2004-2504 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18287 - http://securitytracker.com/id?1012350 - http://secunia.com/advisories/13225 - http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1324.html - http://www.osvdb.org/
a.com/advisories/13225 - http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1324.html - http://www.osvdb.org/12158 - http://www.securityfocus.com/bid/11736 - http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1353.html - http://archives.neohapsis.com/archives/bugtraq/2004-11/0385.html
CVE ID: CVE-2004-2505 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to cause a denial of service (memory consumption and crash) by sending repeated GET or POST requests that trigger error messages that use long strings of data. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2004-04/0184.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15895 - http://www.securityfocus.com/bid/10163
CVE ID: CVE-2004-2506 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unparsed web content delivery vulnerability in WIKINDX before 0.9.9g allows remote attackers to obtain sensitive information via a direct HTTP request to the config.inc file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15885 - http://www.osvdb.org/5401 - http://sourceforge.net/project/shownotes.php?release_id=231421 - http://secunia.com/advisories/11394
CVE ID: CVE-2004-2507 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote attackers to read arbitrary files via an absolute pathname in the next_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11811/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/16339 - http://www.securityfocus.com/bid/10476 - http://securitytracker.com/id?1010489 - http://www.osvdb.org/7112 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0
://securitytracker.com/id?1010489 - http://www.osvdb.org/7112 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0103.html
CVE ID: CVE-2004-2508 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote attackers to inject arbitrary web script or HTML via the next_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2004-06/0215.html - http://www.securityfocus.com/bid/10533 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16415 - http://secunia.com/advisories/11881 - http://securitytracker.com/id?1010424
CVE ID: CVE-2004-2509 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Threads 6.2.3 and 6.5 allow remote attackers to inject arbitrary web script or HTML via the Cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/12366 - http://www.securityfocus.com/bid/11900 - http://securitytracker.com/id?1012503 - http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0239.html - http://www.osvdb.org/12365 - http://www.osvdb.org/12367 - http:
eohapsis.com/archives/fulldisclosure/2004-12/0239.html - http://www.osvdb.org/12365 - http://www.osvdb.org/12367 - http://secunia.com/advisories/13452 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18432
CVE ID: CVE-2004-2510 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in showflat.php in Infopop UBB.Threads before 6.5 allows remote attackers to inject arbitrary web script or HTML via the Cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11900 - http://www.osvdb.org/12364 - http://securitytracker.com/id?1012503 - http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0239.html - http://secunia.com/advisories/13452 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18432
CVE ID: CVE-2004-2511 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the year, (2) month, and (3) day parameters in calendar.php; (4) the cid and (5) url parameters in index.php; (6) the cid parameter in annoucement.php; (7) the cid parameter in news.php; (8) the cid parameter in contents.php; (9) the q parameter in search.php; and (10) the country parameter in register.php. Additional Analyst Notes: - CVE Program Container: References: - http
p; and (10) the country parameter in register.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11338 - http://www.osvdb.org/10587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17639 - http://www.osvdb.org/10588 - http://securitytracker.com/id?1006351 - http://www.osvdb.org/10589 - http://www.securityfocus.com/bid/11339 - http://secunia.com/advisories/12751 - http://www.osvdb.org/10585 - http://www.osvdb.org/10590 - http://www.osvdb.org/11405 - http://archives.neohapsis.com/archives/bugtraq/2004-10/0042.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17638
CVE ID: CVE-2004-2512 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/10591 - http://secunia.com/advisories/12751 - http://www.securityfocus.com/bid/11340 - http://securitytracker.com/id?1011481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17640 - http://archiv
340 - http://securitytracker.com/id?1011481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17640 - http://archives.neohapsis.com/archives/bugtraq/2004-10/0042.html
CVE ID: CVE-2004-2513 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code via a long SELECT command. Additional Analyst Notes: - CVE Program Container: References: - http://home.kabelfoon.nl/~jaabogae/han/m_401b.html - https://www.exploit-db.com/exploits/663 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18295
CVE ID: CVE-2004-2514 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules/private_messages/index.php in PowerPortal 1.x allows remote attackers to inject arbitrary web script or HTML via the (1) SUBJECT or (2) MESSAGE field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16838 - http://securitytracker.com/id?1010802 - http://www.osvdb.org/8319 - http://www.secure4arab.com/forum/showthread.php?t=302 - http://www.securiteam.com/unixfocus/5TP0O2ADFK.html - http://www.securityfocus.
re4arab.com/forum/showthread.php?t=302 - http://www.securiteam.com/unixfocus/5TP0O2ADFK.html - http://www.securityfocus.com/bid/10835
CVE ID: CVE-2004-2515 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in VMware Workstation 4.5.2 build-8848, if running with elevated privileges, might allow local users to execute arbitrary code via format string specifiers in command line arguments. NOTE: it is not clear if there are any default or typical circumstances under which VMware would be running with privileges beyond those already available to the attackers, so this might not be a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldi
rability. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1320.html - http://www.securityfocus.com/bid/11737 - http://www.osvdb.org/12169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18297
CVE ID: CVE-2004-2516 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an HTTP GET command with a large number of "./" sequences followed by "../" sequences. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0052.html - http://sourceforge.net/project/shownotes.php?release_id=267444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17390 - http://secunia.com/advisories/12561 - http://www.osvdb.org/10001 - http://sec
force.ibmcloud.com/vulnerabilities/17390 - http://secunia.com/advisories/12561 - http://www.osvdb.org/10001 - http://securitytracker.com/id?1011278 - http://www.securityfocus.com/bid/11189
CVE ID: CVE-2004-2517 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: myServer 0.7.1 allows remote attackers to cause a denial of service (crash) via a long HTTP POST request in a View=Logon operation to index.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/10333 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17496 - http://sourceforge.net/project/shownotes.php?release_id=270736 - http://fux0r.phathookups.com/advisory/sp-x14-advisory.txt - http://secunia.com/advisories/12640 - http://securitytracker.com/id?1011427
CVE ID: CVE-2004-2518 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gattaca Server 2003 1.1.10.0 allows remote attackers to obtain sensitive information via (1) a trailing null byte ("%00") to a URL or (2) an invalid LANGUAGE parameter to web.tmpl, which reveals the full installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16699 - http://www.osvdb.org/7923 - http://www.securityfocus.com/bid/10729 - http://secunia.com/advisor
/vulnerabilities/16699 - http://www.osvdb.org/7923 - http://www.securityfocus.com/bid/10729 - http://secunia.com/advisories/12071 - http://www.osvdb.org/7922 - http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16700 - http://securitytracker.com/id?1010703
CVE ID: CVE-2004-2519 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gattaca Server 2003 1.1.10.0 allows remote attackers to cause a denial of service (CPU consumption) via directory specifiers in the LANGUAGE parameter to (1) index.tmpl and (2) web.tmpl, such as (a) slash "/", (b) backslash "\", (c) dot ".",, (d) dot dot "..", and (e) internal slash "lang//en". Additional Analyst Notes: - CVE Program Container: References: - http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt - http://www.osvdb.org/7923 - http://secunia.com/advisories/12071 - http://www.securityfocus.com/bid/1072
ver%202003.txt - http://www.osvdb.org/7923 - http://secunia.com/advisories/12071 - http://www.securityfocus.com/bid/10728 - http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16700 - http://securitytracker.com/id?1010703
CVE ID: CVE-2004-2520 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: POP3 protocol in Gattaca Server 2003 1.1.10.0 allows remote authenticated users to cause a denial of service (application crash) via a large numeric value in the (1) LIST, (2) RETR, or (3) UIDL commands. Additional Analyst Notes: - CVE Program Container: References: - http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16703 - http://secunia.com/advisories/12071 - http://www.securityfocus.com/bid/10728 - http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?boar
.com/advisories/12071 - http://www.securityfocus.com/bid/10728 - http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0 - http://securitytracker.com/id?1010703 - http://www.osvdb.org/7925
CVE ID: CVE-2004-2521 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-08T01:29:13.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail server in Gattaca Server 2003 1.1.10.0 allows remote attackers to perform a denial of service (application crash) via a large number of connections to TCP port (1) 25 (SMTP) or (2) 110 (POP). Additional Analyst Notes: - CVE Program Container: References: - http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16703 - http://secunia.com/advisories/12071 - http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091