Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-0571 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:24:26.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Table Conversion Vulnerability," a different vulnerability than CVE-2004-0901. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4328 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.
finition/oval%3Aorg.mitre.oval%3Adef%3A4328 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3416 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18337 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A685 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1168 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3743 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1959 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-041 - https://oval.cisecurity.org/repository/s
s://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-041 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1976 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1417
CVE ID: CVE-2004-0572 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:24:26.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL with a long filename and a .grp extension, which is not properly handled when the shell capability launches grpconv.exe. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1837 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4493 - http://archives.neo
1837 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4493 - http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0290.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3822 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17662 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2753 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3071 - http://www.kb.cert.org/vuls/id/543864 - https://oval.cisecurity.org/repository/search/de
3Aorg.mitre.oval%3Adef%3A3071 - http://www.kb.cert.org/vuls/id/543864 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1843 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3768 - http://www.securityfocus.com/bid/10677 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1279 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-037 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16664
CVE ID: CVE-2004-0573 State: PUBLISHED Published: 2004-09-17T04:00:00 Last Updated: 2024-08-08T00:24:26.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute arbitrary code via a malicious document or website. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109519646030906&w=2 - http://secunia.com/advisories/12529 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5021 - http://securitytracker.com/id?1011251 - https://oval.cisec
sitory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5021 - http://securitytracker.com/id?1011251 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3311 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17306 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2670 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4005 - http://securitytracker.com/id?1011250 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3333 - http://securitytracker.com/id?1011249
l.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3333 - http://securitytracker.com/id?1011249 - http://www.kb.cert.org/vuls/id/449438 - http://securitytracker.com/id?1011252
CVE ID: CVE-2004-0574 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:24:26.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5070
am Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5070 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5021 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17641 - http://marc.info/?l=bugtraq&m=109761632831563&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4392 - http://www.ciac.org/ciac/bulletins/p-012.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A246 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-036 - http://www.kb.cert.org/vuls/id/203126 - https://ova
crosoft.com/en-us/security-updates/securitybulletins/2004/ms04-036 - http://www.kb.cert.org/vuls/id/203126 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5926 - http://www.coresecurity.com/common/showdoc.php?idx=420&idxseccion=10 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17661
CVE ID: CVE-2004-0575 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:24:26.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper length validation. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1011637 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3913 - http://marc.info/?l=ntbugtraq&m=109767
.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3913 - http://marc.info/?l=ntbugtraq&m=109767342326300&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-034 - http://www.ciac.org/ciac/bulletins/p-010.shtml - http://www.eeye.com/html/research/advisories/AD20041012A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4276 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1053 - http://www.kb.cert.org/vuls/id/649374 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17659 - https://oval.cise
orce.ibmcloud.com/vulnerabilities/17624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17659 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6397
CVE ID: CVE-2004-0576 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: The radius daemon (radiusd) for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service (server crash) via malformed SNMP messages containing an invalid OID. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=110&type=vulnerabilities - http://marc.info/?l=full-disclosure&m=108785242716726&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16466
CVE ID: CVE-2004-0577 State: PUBLISHED Published: 2004-07-06T04:00:00 Last Updated: 2024-08-08T00:24:26.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files from the root directory via a URL request to the wingate-internal directory. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=108872788123695&w=2 - http://www.idefense.com/application/poi/display?id=113 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16589
CVE ID: CVE-2004-0578 State: PUBLISHED Published: 2004-07-06T04:00:00 Last Updated: 2024-08-08T00:24:26.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files via leading slash (//) characters in a URL request to the wingate-internal directory. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=108872788123695&w=2 - http://www.idefense.com/application/poi/display?id=113 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16589
CVE ID: CVE-2004-0579 State: PUBLISHED Published: 2004-06-23T04:00:00 Last Updated: 2024-08-08T00:24:26.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16458 - http://www.debian.org/security/2004/dsa-522
CVE ID: CVE-2004-0580 State: PUBLISHED Published: 2004-06-23T04:00:00 Last Updated: 2024-08-08T00:24:26.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://linksys.custhelp.com/cgi-bin/linksys.cfg/php/enduser/std_adp.php?p_faqid=832&p_%20%5Ccreated=1086294093&p_sid=pU1X1idh&p_lva=&p_sp=cF9zcmNoPSZwX3NvcnRfYnk9JnBfZ3JpZHNvcnQ9%20%5CJnBfcm93X2NudD02NTQmcF9wYWdlPTE%2A&p_li
6294093&p_sid=pU1X1idh&p_lva=&p_sp=cF9zcmNoPSZwX3NvcnRfYnk9JnBfZ3JpZHNvcnQ9%20%5CJnBfcm93X2NudD02NTQmcF9wYWdlPTE%2A&p_li= - https://exchange.xforce.ibmcloud.com/vulnerabilities/16142 - http://secunia.com/advisories/11606 - http://www.osvdb.org/6325 - http://securitytracker.com/alerts/2004/May/1010288.html - http://marc.info/?l=bugtraq&m=108662876129301&w=2 - http://www.securityfocus.com/bid/10329
CVE ID: CVE-2004-0581 State: PUBLISHED Published: 2004-06-23T04:00:00 Last Updated: 2024-08-08T00:24:26.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16392 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:060
CVE ID: CVE-2004-0582 State: PUBLISHED Published: 2004-06-23T04:00:00 Last Updated: 2024-08-08T00:24:26.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Webmin 1.140 allows remote attackers to bypass access control rules and gain read access to configuration information for a module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10474 - http://www.debian.org/security/2004/dsa-526 - http://marc.info/?l=bugtraq&m=108697184602191&w=2 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:074 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000848 - https://exchange.xforce.i
y.php?name=MDKSA-2004:074 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000848 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16333 - http://www.webmin.com/changes-1.150.html - http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/74_e.html - http://www.gentoo.org/security/en/glsa/glsa-200406-12.xml - http://www.securityfocus.com/bid/10522
CVE ID: CVE-2004-0583 State: PUBLISHED Published: 2004-06-23T04:00:00 Last Updated: 2024-08-08T00:24:26.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10474 - http://www.debian.org/security/2004/dsa-526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16334 - http://www.securityfocus.com/bid/10523 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDK
ities/16334 - http://www.securityfocus.com/bid/10523 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:074 - http://marc.info/?l=bugtraq&m=108737059313829&w=2 - http://www.gentoo.org/security/en/glsa/glsa-200406-15.xml - http://www.webmin.com/changes-1.150.html - http://www.gentoo.org/security/en/glsa/glsa-200406-12.xml - http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/75_e.html
CVE ID: CVE-2004-0584 State: PUBLISHED Published: 2004-06-23T04:00:00 Last Updated: 2024-08-08T00:24:26.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Horde IMP 3.2.3 and earlier, before a "security fix," does not properly validate input, which allows remote attackers to execute arbitrary script as other users via script or HTML in an e-mail message, possibly triggering a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.horde.org/imp/3.2/ - http://www.securityfocus.com/bid/10501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16357 - http://www.gentoo.org/security/en/glsa/gls
.com/bid/10501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16357 - http://www.gentoo.org/security/en/glsa/glsa-200406-11.xml - http://secunia.com/advisories/11805
CVE ID: CVE-2004-0585 State: REJECTED Published: 2004-06-23T04:00:00 Last Updated: 2004-06-24T09:00:00 Description: No description available.
CVE ID: CVE-2004-0586 State: PUBLISHED Published: 2004-06-23T04:00:00 Last Updated: 2024-08-08T00:24:26.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: acpRunner ActiveX 1.2.5.0 allows remote attackers to execute arbitrary code via the (1) DownLoadURL, (2) SaveFilePath, and (3) Download ActiveX methods. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108745652205176&w=2 - http://www-306.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-54588 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16429
CVE ID: CVE-2004-0587 State: PUBLISHED Published: 2004-06-23T04:00:00 Last Updated: 2024-08-08T00:24:26.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1010057 - http://www.redhat.com/support/errata/RHSA-2004-413.html - http://www.redhat.com/support/errata/RHSA-2004-418.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9398 - http://www.novell.com/linux/security/advisories/2004_10_kernel.html - http://lwn.net/Articles/9
itre.oval%3Adef%3A9398 - http://www.novell.com/linux/security/advisories/2004_10_kernel.html - http://lwn.net/Articles/91155/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/16062 - http://www.securityfocus.com/bid/10279 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:066 - ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc
CVE ID: CVE-2004-0588 State: PUBLISHED Published: 2004-06-23T04:00:00 Last Updated: 2024-08-08T00:24:26.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and script via e-mail messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200406-15.xml - http://marc.info/?l=bugtraq&m=108781564518287&w=2 - http://www.securityfocus.com/bid/10521 - http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/73_e.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16494
CVE ID: CVE-2004-0589 State: PUBLISHED Published: 2004-06-23T04:00:00 Last Updated: 2024-08-08T00:24:26.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 11.1(x) through 11.3(x) and 12.0(x) through 12.2(x), when configured for BGP routing, allows remote attackers to cause a denial of service (device reload) via malformed BGP (1) OPEN or (2) UPDATE messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/784540 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4948 - http://www.cisco.com/warp/public/707/cisco-sa-20040616-bgp.shtml - https://exchange.xforce.ibmcloud.com/vulnerabiliti
- http://www.cisco.com/warp/public/707/cisco-sa-20040616-bgp.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/16427
CVE ID: CVE-2004-0590 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:27.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS#7 certificates in which a self-signed certificate identifies an alternate Certificate Authority (CA) and spoofed issuer and subject. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:070 - http://www.openswan.org/support/vu
ces: - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:070 - http://www.openswan.org/support/vuln/can-2004-0590/ - http://security.gentoo.org/glsa/glsa-200406-20.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/16515
CVE ID: CVE-2004-0591 State: PUBLISHED Published: 2004-06-24T04:00:00 Last Updated: 2024-08-08T00:24:26.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script or HRML via (1) e-mail headers or (2) a message with a "message/delivery-status" MIME Content-Type. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200408-02.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/16467 - http://secunia.com/advisories/11918/ - http://www.debian.org/securi
exchange.xforce.ibmcloud.com/vulnerabilities/16467 - http://secunia.com/advisories/11918/ - http://www.debian.org/security/2004/dsa-533 - http://marc.info/?l=bugtraq&m=108786212220140&w=2 - http://www.securityfocus.com/bid/10588
CVE ID: CVE-2004-0592 State: PUBLISHED Published: 2006-01-23T20:00:00 Last Updated: 2024-08-08T00:24:26.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tcp_find_option function of the netfilter subsystem for IPv6 in the SUSE Linux 2.6.5 kernel with USAGI patches, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a large option length that produces a negative integer after a casting operation to the char type, a similar flaw to CVE-2004-0626. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023408.html - https://e
VE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023408.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43137 - http://www.novell.com/linux/security/advisories/2004_20_kernel.html
CVE ID: CVE-2004-0593 State: PUBLISHED Published: 2004-08-18T04:00:00 Last Updated: 2024-08-08T00:24:26.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sygate Enforcer 3.5MR1 and earlier passes broadcast traffic before authentication, which could allow remote attackers to bypass filtering rules. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16948 - http://www.securityfocus.com/bid/10908 - http://www.corsaire.com/advisories/c031120-003.txt - http://marc.info/?l=bugtraq&m=109215731626998&w=2
CVE ID: CVE-2004-0594 State: PUBLISHED Published: 2004-07-16T04:00:00 Last Updated: 2024-08-08T00:24:26.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.org/errata/2004/0039/ - http://lists.grok.org.uk/pipermail/f
: - CVE Program Container: References: - http://www.trustix.org/errata/2004/0039/ - http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023908.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000847 - http://marc.info/?l=bugtraq&m=108982983426031&w=2 - http://www.debian.org/security/2005/dsa-669 - http://www.redhat.com/support/errata/RHSA-2004-395.html - http://www.redhat.com/support/errata/RHSA-2004-405.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10896 - http://www.redhat.com/support/errata/RHSA-2004-392.html - http://www.debian.org/security/2004/dsa-531 - http://www.novell.com/linux/security/advisories/2004_21_php4.
4-392.html - http://www.debian.org/security/2004/dsa-531 - http://www.novell.com/linux/security/advisories/2004_21_php4.html - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:068 - http://www.redhat.com/support/errata/RHSA-2005-816.html - http://marc.info/?l=bugtraq&m=109181600614477&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16693 - http://marc.info/?l=bugtraq&m=109051444105182&w=2 - http://www.securityfocus.com/bid/10725 - http://marc.info/?l=bugtraq&m=108981780109154&w=2 - http://www.gentoo.org/security/en/glsa/glsa-200407-13.xml