Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-2365 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Microsoft Windows XP and Windows Server 2003 allows local users to cause a denial of service (memory exhaustion) by repeatedly creating and deleting directories using a non-standard tool such as smbmount. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2004-02/0119.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15057
CVE ID: CVE-2004-2366 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in GlobalSCAPE Secure FTP Server 2.0 B03.11.2004.2 allows remote attackers to cause a denial of service (crash) via a SITE command with a long argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/windowsntfocus/5KP0C20CAC.html - http://www.cuteftp.com/gsftps/history.asp - http://www.securityfocus.com/bid/9904 - http://secunia.com/advisories/11159/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/15511
CVE ID: CVE-2004-2367 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control Panel applet in WFTPD and WFTPD Pro 3.21 R1 and R2 allows remote authenticated users to cause a denial of service (crash) via a long FTP command. Additional Analyst Notes: - CVE Program Container: References: - http://www.wftpd.com/bug_gpf.htm - http://secunia.com/advisories/11160/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/15510 - http://www.securiteam.com/windowsntfocus/5JP0B20CAY.html - http://www.securityfocus.com/bid/9908
CVE ID: CVE-2004-2368 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP code via the systempath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.opt-x.org/index.php - http://www.securityfocus.com/bid/9732 - http://www.zone-h.org/en/advisories/read/id=4036/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/15296
CVE ID: CVE-2004-2369 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect directories via a .. (dot dot) in the directory creation command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11143/ - http://www.securityfocus.com/bid/9900 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15503 - http://members.lycos.co.uk/r34ct/main/ibm_lotus_domino/lotus.txt
CVE ID: CVE-2004-2370 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Trillian 0.71 through 0.74f and Trillian Pro 1.0 through 2.01 allows remote attackers to execute arbitrary code via a Yahoo Messenger packet with a long key name. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10973/ - http://security.e-matters.de/advisories/022004.html - http://www.osvdb.org/4060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15304 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017766.html - http://secur
.com/vulnerabilities/15304 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017766.html - http://securitytracker.com/id?1009220
CVE ID: CVE-2004-2371 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service (hang) via packets that contain text strings with incorrect size values. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15305 - http://www.securityfocus.com/bid/9738 - http://www.securityfocus.com/archive/1/
rce.ibmcloud.com/vulnerabilities/15305 - http://www.securityfocus.com/bid/9738 - http://www.securityfocus.com/archive/1/355051 - http://www.zone-h.org/advisories/read/id=4038 - http://aluigi.altervista.org/adv/grboom-adv.txt
CVE ID: CVE-2004-2372 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Bochs before 2.1.1, if installed setuid, allows local users to execute arbitrary code via a long HOME environment variable, which is used if the .bochsrc, bochsrc, and bochsrc.txt cannot be found in a known path. NOTE: some external documents recommend that Bochs be installed setuid root, so this should be treated as a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15309 - http://securitytracker.com/id?1009219 - http://www.
nces: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15309 - http://securitytracker.com/id?1009219 - http://www.securiteam.com/unixfocus/5XP0L1FC0M.html - http://sourceforge.net/project/shownotes.php?release_id=215733
CVE ID: CVE-2004-2373 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/354448 - http://www.securityfocus.com/bid/9698 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15310
CVE ID: CVE-2004-2374 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes the pathname in the source of the resulting HTML. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/355109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15311 - http://www.securityfocus.com/bid/9737
CVE ID: CVE-2004-2375 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the POP3 server in 1st Class Mail Server 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an APOP USER command with a long second parameter (digest). Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4129 - http://securitytracker.com/id?1009279 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15314 - http://www.digiti.be/jeffosz/advisories/1stclasspop3.txt - http://www.securityfocus.com/bid/9794 - http://secunia
5314 - http://www.digiti.be/jeffosz/advisories/1stclasspop3.txt - http://www.securityfocus.com/bid/9794 - http://secunia.com/advisories/11029 - http://www.zone-h.org/advisories/read/id=4047
CVE ID: CVE-2004-2376 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL request with a long attfile attribute. Additional Analyst Notes: - CVE Program Container: References: - http://members.lycos.co.uk/r34ct/main/TW-webserver/TWwebserver.txt - http://www.securitytracker.com/alerts/2004/Mar/1009443.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15515
CVE ID: CVE-2004-2377 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alcatel OmniSwitch 7000 and 7800 allows remote attackers to cause a denial of service (reboot) via certain network scans, as demonstrated using a Nessus port scan of ports 1 through 1024 with safe-checks disabled. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15318 - http://www.securityfocus.com/bid/9745 - http://secunia.com/advisories/10981 - http://www.osvdb.org/4064 - http://www.securityfocus.com/archive/1/355134 - http://securitytracker.com/id?1009211
CVE ID: CVE-2004-2378 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: @Mail 3.64 for Windows allows remote attackers to cause a denial of service ("unusable" server) via a large number of POP3 connections to the server. Additional Analyst Notes: - CVE Program Container: References: - http://members.lycos.co.uk/r34ct/main/%40mail_3.64/%40mail_3.64.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/15320 - http://secunia.com/advisories/10978 - http://www.securityfocus.com/bid/9749 - http://www.securitytracker.com/alerts/2004/Feb/1009208.html - http://www.osvdb.org/4068
CVE ID: CVE-2004-2379 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in @Mail 3.64 for Windows allow remote attackers to inject arbitrary web script or HTML via (1) the Displayed Name attribute in util.pl and (2) the Folder attribute in showmail.pl. Additional Analyst Notes: - CVE Program Container: References: - http://members.lycos.co.uk/r34ct/main/%40mail_3.64/%40mail_3.64.txt - http://www.osvdb.org/4067 - http://secunia.com/advisories/10978 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15324 - http://www.securitytracker.com/alerts
om/advisories/10978 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15324 - http://www.securitytracker.com/alerts/2004/Feb/1009208.html - http://www.osvdb.org/4066 - http://www.securityfocus.com/bid/9748
CVE ID: CVE-2004-2380 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to write arbitrary files via a .. (dot dot) in the attfile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://members.lycos.co.uk/r34ct/main/TW-webserver/TWwebserver.txt - http://www.securitytracker.com/alerts/2004/Mar/1009443.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15523
CVE ID: CVE-2004-2381 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4387 - http://secunia.com/advisories/11166/ - http://sourceforge.net/project/shownotes.php?release_id=224743 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15537 - http://www.securityfocus.com/bid/9917 - http://cvs.sourceforge.net/viewcvs.py/jetty/Jet
loud.com/vulnerabilities/15537 - http://www.securityfocus.com/bid/9917 - http://cvs.sourceforge.net/viewcvs.py/jetty/Jetty/src/org/mortbay/http/HttpRequest.java?r1=1.75&r2=1.76
CVE ID: CVE-2004-2382 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PerfectNav plugin for Microsoft Internet Explorer allows remote attackers to cause a denial of service (browser crash) via a malformed URL such as "?". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15326 - http://securetarget.net/advisory.htm - http://www.securityfocus.com/bid/9753 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017830.html - http://securitytracker.com/id?1009218
CVE ID: CVE-2004-2383 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events from other domains via an HTML document with Javascript that is outside a frameset that includes the target domain, then forcing the frameset to maintain focus. NOTE: the discloser claimed that the vendor does not categorize this as a vulnerability, but it can be used in a spoofing scenario; the discloser provides alternate scenarios. Spoofing scenarios are currently included in CVE. Addi
a spoofing scenario; the discloser provides alternate scenarios. Spoofing scenarios are currently included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9761 - http://www.idefense.com/application/poi/display?id=77&type=vulnerabilities&flashstatus=false - https://exchange.xforce.ibmcloud.com/vulnerabilities/15337
CVE ID: CVE-2004-2384 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: NullSoft Winamp 5.02 allows remote attackers to cause a denial of service (crash) by creating a file with a long filename, which causes the victim's player to crash when the file is opened from the command line. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/357986 - http://www.securityfocus.com/archive/1/358097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15541 - http://www.securityfocus.com/bid/9920
CVE ID: CVE-2004-2385 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for init.emu. Additional Analyst Notes: - CVE Program Container: References: - http://members.lycos.co.uk/r34ct/main/emu/emu.txt - http://secunia.com/advisories/11110 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15453 - http://www.securityfocus.com/bid/9861 - http://www.osvdb.org/4203
CVE ID: CVE-2004-2386 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers passed from the HandleCPCCommand function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11031 - http://securitytracker.com/id?1011038 - http://secunia.com/advisories/12351 - http://www.osvdb.org/8375 - http://www.securityfocus.com/bid/11002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1
p://www.osvdb.org/8375 - http://www.securityfocus.com/bid/11002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17056 - http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/sercd/sercd.c?root=sercd - http://www.osvdb.org/9104
CVE ID: CVE-2004-2387 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the HandleCPCCommand function of sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/9100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17059 - http://securitytracker.com/id?1011038 - http://secunia.com/advisories/12351 - http://www.securityfocus.com/bid/11002 - http://www.securityfocus.com/bid/11033 - http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/sercd/sercd.c?root=s
/bid/11002 - http://www.securityfocus.com/bid/11033 - http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/sercd/sercd.c?root=sercd
CVE ID: CVE-2004-2388 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function and assign privileges to the wrong user. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11085 - http://www.ciac.org/ciac/bulletins/o-102.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/15455 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY53507 - http://www.securityfocus.com/bid/9835 - ht
rabilities/15455 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY53507 - http://www.securityfocus.com/bid/9835 - http://www.osvdb.org/4248
CVE ID: CVE-2004-2389 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-08T01:22:13.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attackers to cause a denial of service (infinite loop) via user re-registration. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15319 - http://www.securityfocus.com/bid/9710 - http://www.osvdb.org/4057 - http://securitytracker.com/id?1009248 - http://secunia.com/advisories/10974/ - http://www.jabberstudio.org/projects/jabber-gg-transport/release
com/id?1009248 - http://secunia.com/advisories/10974/ - http://www.jabberstudio.org/projects/jabber-gg-transport/releases/view.php?id=429
CVE ID: CVE-2004-2390 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-08T01:22:13.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: The roster import functionality in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8, when using libgadu 1.0 and later, allows attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15319 - http://www.securityfocus.com/bid/9710 - http://secunia.com/advisories/10974/ - http://www.jabberstudio.org/projects/jabber-gg-transport/releases/view.php?id=429
CVE ID: CVE-2004-2391 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-08T01:22:13.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attackers to cause a denial of service a message with an empty <priority/> tag. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15319 - http://www.securityfocus.com/bid/9710 - http://secunia.com/advisories/10974/ - http://www.jabberstudio.org/projects/jabber-gg-transport/releases/view.php?id=429
CVE ID: CVE-2004-2392 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-08T01:22:13.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via unknown attack vectors, related to read failures and other bugs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16188 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:044 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120168 - http://www.redhat.com/support/errata/RHSA-2005-770.html - http://securitytracke
at.com/bugzilla/show_bug.cgi?id=120168 - http://www.redhat.com/support/errata/RHSA-2005-770.html - http://securitytracker.com/id?1010187
CVE ID: CVE-2004-2393 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-08T01:22:13.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which allows remote attackers to falsely authenticate peers for SSL/TLS. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001273.1-1 - http://secunia.com/advisories/11639 - http://www.osvdb.org/6299 - http://www.securityfocus.com/bid/10387 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201724-1 - https://exchange.x
www.securityfocus.com/bid/10387 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201724-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16194 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57560-1 - http://securitytracker.com/id?1010193
CVE ID: CVE-2004-2394 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-08T01:22:13.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password instead of the first 79, which results in a small reduction of the search space required for brute force attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10370 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:045 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
04:045 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16178
CVE ID: CVE-2004-2395 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-08T01:22:13.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of failed read attempts from the password buffer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10370 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16180 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060
CVE ID: CVE-2004-2396 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-08T01:22:13.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: passwd 0.68 does not check the return code for the pam_start function, which has unknown impact and attack vectors that may prevent "safe and proper operation" of PAM. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10370 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16179 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060