Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
7f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thre
l/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2004-0812 State: PUBLISHED Published: 2005-01-20T05:00:00 Last Updated: 2024-08-08T00:31:47.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the Linux kernel before 2.4.23, on the AMD AMD64 and Intel EM64T architectures, associated with "setting up TSS limits," allows local users to cause a denial of service (crash) and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18346 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11375 - http://www.redhat.com/support/erra
val.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11375 - http://www.redhat.com/support/errata/RHSA-2004-549.html - http://www.ciac.org/ciac/bulletins/p-047.shtml - http://linux.bkbits.net:8080/linux-2.6/cset%403fad673ber4GuU7iWppydzNIyLntEQ - http://www.securityfocus.com/bid/11794
CVE ID: CVE-2004-0813 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:47.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html - http://security.gentoo.org/glsa/glsa-200711-23.xml - http://secunia.com/advisories/25894 - http://www.vupen.com/english/advisories/2007/3229 - http://www.redhat.com/support/errata/RHSA-2007-0465.html - http://lkml.org/lkml/2004/7
om/english/advisories/2007/3229 - http://www.redhat.com/support/errata/RHSA-2007-0465.html - http://lkml.org/lkml/2004/7/30/147 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10011 - http://www.securityfocus.com/bid/25749 - http://secunia.com/advisories/26909 - http://secunia.com/advisories/27706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17505 - ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc - http://secunia.com/advisories/25631
CVE ID: CVE-2004-0814 State: PUBLISHED Published: 2004-10-28T04:00:00 Last Updated: 2024-08-08T00:31:47.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or (2) remote attackers to cause a denial of service (panic) by switching from console to PPP line discipline, then quickly sending data that is received during the switch. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=133110
tional Analyst Notes: - CVE Program Container: References: - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=133110 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 - http://marc.info/?l=bugtraq&m=110306397320336&w=2 - https://bugzilla.fedora.us/show_bug.cgi?id=2336 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17816 - http://www.securityfocus.com/archive/1/379005 - http://www.securityfocus.com/bid/11492 - http://www.securityfocus.com/bid/11491 - http://www.redhat.com/support/errata/RHSA-2005-293.html - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=131672 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10728
CVE ID: CVE-2004-0815 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:31:47.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames. Additional Analyst Notes: - CVE Program Container: References: - http://us4.samba.org/samba/news/#security_2.2.12 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1 - http://marc.info/?l=bugtraq&m=109655827913457&w
12 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1 - http://marc.info/?l=bugtraq&m=109655827913457&w=2 - https://bugzilla.fedora.us/show_bug.cgi?id=2102 - http://www.idefense.com/application/poi/display?id=146&type=vulnerabilities&flashstatus=true - http://www.securityfocus.com/archive/1/377618 - http://www.debian.org/security/2004/dsa-600 - http://www.redhat.com/support/errata/RHSA-2004-498.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873 - http://www.securityfocus.com/bid/11281 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104 - http://www.trustix.org/errata/2004/0051/ - http://sunsolve.sun.com/search/document.do?asset
ry.php?name=MDKSA-2004:104 - http://www.trustix.org/errata/2004/0051/ - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1 - http://www.novell.com/linux/security/advisories/2004_35_samba.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17556
CVE ID: CVE-2004-0816 State: PUBLISHED Published: 2004-10-26T04:00:00 Last Updated: 2024-08-08T00:31:47.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11202/ - http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 - http://www.novell.com/linux/security/advisories/2004_37_kernel.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17800 - http://www.securityfocus.com/bid/11488
CVE ID: CVE-2004-0817 State: PUBLISHED Published: 2004-09-17T04:00:00 Last Updated: 2024-08-08T00:31:47.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-465.html - http://www.debian.org/security/2004/dsa-548 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:089 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17182 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1 - http://distro.conectiva.com
/vulnerabilities/17182 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870 - http://www.securityfocus.com/bid/11084 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8843 - http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml
CVE ID: CVE-2004-0818 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0819 State: PUBLISHED Published: 2004-09-02T04:00:00 Last Updated: 2024-08-08T00:31:47.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote attackers to cause a denial of service (crash) via an ICMP echo (ping) packet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17129 - http://openbsd.org/errata34.html - http://marc.info/?l=bugtraq&m=109345131508824&w=2
CVE ID: CVE-2004-0820 State: PUBLISHED Published: 2004-09-02T04:00:00 Last Updated: 2024-08-08T00:31:47.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12381/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/17124 - http://www.auscert.org.au/render.html?it=4338 - http://www.frsirt.com/exploits/08252004.skinhead.php
CVE ID: CVE-2004-0821 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:47.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CFPlugIn in Core Foundation framework in Mac OS X allows user supplied libraries to be loaded, which could allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11135 - http://www.auscert.org.au/render.html?it=4363 - http://www.kb.cert.org/vuls/id/704110 - http://secunia.com/advisories/12491/ - http://www.auscert.org.au/render.html?it=4363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17291 - http://www.ciac.org/ciac/bulletins/o-212.
er.html?it=4363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17291 - http://www.ciac.org/ciac/bulletins/o-212.shtml
CVE ID: CVE-2004-0822 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:47.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to execute arbitrary code via a certain environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11136 - http://secunia.com/advisories/12491/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/17295 - http://www.kb.cert.org/vuls/id/545446 - http://www.securityfocus.com/advisories/7148 - http://www.ciac.org/ciac/bulletins/o-212.sh
.kb.cert.org/vuls/id/545446 - http://www.securityfocus.com/advisories/7148 - http://www.ciac.org/ciac/bulletins/o-212.shtml
CVE ID: CVE-2004-0823 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T00:31:47.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17300 - http://support.avaya.com/elmodocs2/security/ASA-2006-157.htm - http://www.r
.xforce.ibmcloud.com/vulnerabilities/17300 - http://support.avaya.com/elmodocs2/security/ASA-2006-157.htm - http://www.redhat.com/support/errata/RHSA-2005-751.html - http://secunia.com/advisories/12491/ - http://www.securityfocus.com/bid/11137 - http://www.auscert.org.au/render.html?it=4363 - http://secunia.com/advisories/21520 - http://www.securityfocus.com/advisories/7148 - http://secunia.com/advisories/17233 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10703
CVE ID: CVE-2004-0824 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T00:31:47.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: PPPDialer for Mac OS X 10.2.8 through 10.3.5 allows local users to overwrite system files via a symlink attack on PPPDialer log files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17298 - http://securitytracker.com/id?1011175 - http://www.auscert.org.au/render.html?it=4363 - http://www.securityfocus.com/bid/11139 - http://www.securityfocus.com/advisories/7148 - http://www.ciac.org/ciac/bulletins/o-212.shtml
CVE ID: CVE-2004-0825 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:47.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote attackers to cause a denial of service (application deadlock) via a certain sequence of operations. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1011176 - http://www.securityfocus.com/bid/11138 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17294 - http://www.kb.cert.org/vuls/id/914870 - http://www.securityfocus.com/advisories/7148 - http://www.ciac.org/ciac/bulletins/o-212.shtml - ht
.org/vuls/id/914870 - http://www.securityfocus.com/advisories/7148 - http://www.ciac.org/ciac/bulletins/o-212.shtml - http://secunia.com/advisories/12491 - http://marc.info/?l=bugtraq&m=109467471617466&w=2
CVE ID: CVE-2004-0826 State: PUBLISHED Published: 2004-09-02T04:00:00 Last Updated: 2024-08-08T00:31:47.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11015 - http://xforce.iss.net/xforce/alerts/id/180 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16314 - http://marc.info/?l=bugtraq&m=109351293827731&w=2
CVE ID: CVE-2004-0827 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:47.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11123 - http://www.vupen.com/english/advisories/2008/0412 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-2
3A11123 - http://www.vupen.com/english/advisories/2008/0412 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201006-1 - http://www.debian.org/security/2004/dsa-547 - http://www.redhat.com/support/errata/RHSA-2004-494.html - http://www.redhat.com/support/errata/RHSA-2004-480.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-231321-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17173 - http://secunia.com/advisories/28800
CVE ID: CVE-2004-0828 State: PUBLISHED Published: 2004-09-28T04:00:00 Last Updated: 2024-08-08T00:31:47.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before executing the -f option, which allows local users to modify or create arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1011429 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17514 - http://www.securityfocus.com/bid/11264 - http://secunia.com/advisories/12664/
CVE ID: CVE-2004-0829 State: PUBLISHED Published: 2004-09-10T04:00:00 Last Updated: 2024-08-08T00:31:47.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service (daemon crash) by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/lists/bugtraq/2004/Sep/0003.html - http://www.trustix.org/errata/2004/0043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17138 - http://www.gentoo.org/security/en/glsa/glsa-200409-14.xml - http:/
/exchange.xforce.ibmcloud.com/vulnerabilities/17138 - http://www.gentoo.org/security/en/glsa/glsa-200409-14.xml - http://samba.org/samba/history/samba-2.2.11.html
CVE ID: CVE-2004-0830 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:47.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Content Scanner Server in F-Secure Anti-Virus for Microsoft Exchange 6.21 and earlier, F-Secure Anti-Virus for Microsoft Exchange 6.01 and earlier, and F-Secure Internet Gatekeeper 6.32 and earlier allow remote attackers to cause a denial of service (service crash due to unhandled exception) via a certain malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109483205925698&w=2 - http://www.idefense.com/application/poi/display?id=137&type=vulnerabilities - http://w
l=bugtraq&m=109483205925698&w=2 - http://www.idefense.com/application/poi/display?id=137&type=vulnerabilities - http://www.f-secure.com/security/fsc-2004-2.shtml - http://www.securityfocus.com/bid/11145 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17307
CVE ID: CVE-2004-0831 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:47.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the System Tray applet, which could allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17367 - http://www.idefense.com/application/poi/display?id=140&type=vulnerabilities - http://marc.info/?l=bugtraq&m=109526269429728&w=2
CVE ID: CVE-2004-0832 State: PUBLISHED Published: 2004-09-28T04:00:00 Last Updated: 2024-08-08T00:31:47.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attackers to cause a denial of service (application crash) via an NTLMSSP packet that causes a negative value to be passed to memcpy. Additional Analyst Notes: - CVE Program Container: References: - http://www1.uk.squid-cache.org/squid/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-ntlm_fetch_string - http://www.securityfocus.com/bid/11098 - http://www.squid-cache.org/bugs/show_bug.cgi?id=1045 - http:
tlm_fetch_string - http://www.securityfocus.com/bid/11098 - http://www.squid-cache.org/bugs/show_bug.cgi?id=1045 - http://www.gentoo.org/security/en/glsa/glsa-200409-04.xml - http://fedoranews.org/updates/FEDORA--.shtml - http://www.trustix.org/errata/2004/0047/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17218 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:093
CVE ID: CVE-2004-0833 State: PUBLISHED Published: 2004-11-19T05:00:00 Last Updated: 2024-08-08T00:31:47.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail configuration script with a fixed username and password, which could allow remote attackers to use Sendmail as an open mail relay and send spam messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17531 - http://secunia.com/advisories/12667 - http://www.debian.org/security/2004/dsa-554 - http://www.securityfocus.com/bid/11262
CVE ID: CVE-2004-0834 State: PUBLISHED Published: 2004-10-20T04:00:00 Last Updated: 2024-08-08T00:31:47.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2) pppoa2, or (3) pppoa3. Additional Analyst Notes: - CVE Program Container: References: - http://speedtouch.sourceforge.net/index.php?/news.en.html - http://www.mail-archive.com/speedtouch%40ml.free.fr/msg06688.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17792 - http://sourceforge.net/project/showfiles.php?group_id=32758&package_id=28264&release_id=271734
CVE ID: CVE-2004-0835 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:31:47.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.mysql.com/bug.php?id=3270 - http://www.mysql.org/doc/refman/4.1/en/news-4-1-2.html - http://www.redhat.com/support/errata/RHSA-2004-611.html - http://secunia.com/advisories/12783/ - http
/news-4-1-2.html - http://www.redhat.com/support/errata/RHSA-2004-611.html - http://secunia.com/advisories/12783/ - http://www.debian.org/security/2004/dsa-562 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1 - http://www.securityfocus.com/bid/11357 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892 - http://www.mysql.org/doc/refman/4.1/en/news-4-0-19.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17666 - http://www.redhat.com/support/errata/RHSA-2004-597.html - http://www.ciac.org/ciac/bulletins/p-018.shtml - http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml - http://www.trustix.org/errata/2004/0054/ - http://lists.mysql.com/internals/
o.org/security/en/glsa/glsa-200410-22.xml - http://www.trustix.org/errata/2004/0054/ - http://lists.mysql.com/internals/13073 - http://securitytracker.com/id?1011606
CVE ID: CVE-2004-0836 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:31:47.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length (h_length). Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-611.html - http://www.securityfocus.com/bid/10981 - http://www.debian.org/security/2004/dsa-562 - http://marc.info/?l=bugtraq&m=110140517515735&w=2 - https://exchange.
81 - http://www.debian.org/security/2004/dsa-562 - http://marc.info/?l=bugtraq&m=110140517515735&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17047 - http://secunia.com/advisories/12305/ - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892 - http://www.redhat.com/support/errata/RHSA-2004-597.html - http://www.ciac.org/ciac/bulletins/p-018.shtml - http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml - http://www.trustix.org/errata/2004/0054/ - http://lists.mysql.com/internals/14726 - http://bugs.mysql.com/bug.php?id=4017