Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-0386 State: PUBLISHED Published: 2004-04-07T04:00:00 Last Updated: 2024-08-08T00:17:14.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11259 - http://www.mplayerhq.hu/homepage/design6/news.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15675 - http://marc.info/?l=bugtraq&m=108067020624076&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:026 - http://www.kb.cert.org/vuls/id/72391
67020624076&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:026 - http://www.kb.cert.org/vuls/id/723910 - http://www.securityfocus.com/bid/10008 - http://www.securityfocus.com/archive/1/359025 - http://security.gentoo.org/glsa/glsa-200403-13.xml
CVE ID: CVE-2004-0387 State: PUBLISHED Published: 2004-04-16T04:00:00 Last Updated: 2024-08-08T00:17:14.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allows remote attackers to execute arbitrary code via a malformed .R3T file. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/displayvuln.php?osvdb_id=4977 - http://www.service.real.com/help/faq/security/040406_r3t/en/ - http://marc.info/?l=bugtraq&m=108135350810135&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15774 - http://archives.ne
.info/?l=bugtraq&m=108135350810135&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15774 - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0077.html - http://secunia.com/advisories/11314 - http://www.ngssoftware.com/advisories/realr3t.txt - http://www.securityfocus.com/bid/10070
CVE ID: CVE-2004-0388 State: PUBLISHED Published: 2004-04-16T04:00:00 Last Updated: 2024-08-08T00:17:14.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1009784 - http://secunia.com/advisories/11223/ - http://dev.mysql.com/doc/mysql/en/news-4-1-2.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15883 - http://www.debian.org/security/2004/dsa-483 - http://security.gentoo.org/glsa/glsa-200405-20.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2004:034 - http://
/security.gentoo.org/glsa/glsa-200405-20.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2004:034 - http://www.redhat.com/support/errata/RHSA-2004-597.html - http://www.ciac.org/ciac/bulletins/p-018.shtml - http://marc.info/?l=bugtraq&m=108206802810402&w=2 - http://www.redhat.com/support/errata/RHSA-2004-569.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10559 - http://www.osvdb.org/6421 - http://www.securityfocus.com/bid/10142
CVE ID: CVE-2004-0389 State: PUBLISHED Published: 2004-04-17T04:00:00 Last Updated: 2024-08-08T00:17:14.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GET_PARAMETER or (2) DESCRIBE requests. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11395 - http://www.idefense.com/application/poi/display?id=102&type=vulnerabilities - https://exchange.xforce.ibmcloud.com/vulnerabilities/15880 - http://www.securityfocus.com/bid/10157
CVE ID: CVE-2004-0390 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T00:17:14.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthorized access to an X session via other X login methods. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16113 - http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0424.html - http://www.securityfocus.com/advisories/6684
CVE ID: CVE-2004-0391 State: PUBLISHED Published: 2004-04-16T04:00:00 Last Updated: 2024-08-08T00:17:14.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7 through 1.7.3 have a hardcoded username and password, which allows remote attackers to add new users, modify existing users, and change configuration. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/o-111.shtml - http://www.cisco.com/warp/public/707/cisco-sa-20040407-username.shtml - http://www.kb.cert.org/vuls/id/659228 - http://www.securityfocus.com/bid/10076 - https://exchange.x
407-username.shtml - http://www.kb.cert.org/vuls/id/659228 - http://www.securityfocus.com/bid/10076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15773
CVE ID: CVE-2004-0392 State: PUBLISHED Published: 2004-05-06T04:00:00 Last Updated: 2024-08-08T00:17:14.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.vuxml.org/freebsd/40fcf20f-8891-11d8-90d1-0020ed76ef5a.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15893 - http://orange.kame.net/dev/query-pr.cgi?pr=555 - ftp://ftp.sco.com/pub/
ange.xforce.ibmcloud.com/vulnerabilities/15893 - http://orange.kame.net/dev/query-pr.cgi?pr=555 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt
CVE ID: CVE-2004-0393 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:17:14.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved, which is provided to the syslog function. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108810992313652&w=2 - http://www.securityfocus.com/bid/10578 - http://www.debian.org/security/2004/dsa-524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16453
CVE ID: CVE-2004-0394 State: PUBLISHED Published: 2004-05-05T04:00:00 Last Updated: 2024-08-08T00:17:14.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://www.debian.org/security/2006/dsa-1082 - http://www.securityfocus.com/bid/10233 - http://www.novell.com/linux/security/advisories/2004_10_kernel.html - http://www.debian.org/security/2006/dsa-1070 - http://secunia.com/advisories/20162 - http://www.mandriva.com/security/adviso
://www.debian.org/security/2006/dsa-1070 - http://secunia.com/advisories/20162 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:037 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15953 - http://lwn.net/Articles/81773/ - http://www.debian.org/security/2006/dsa-1067 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846 - http://www.debian.org/security/2006/dsa-1069 - ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc - http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html - ftp://patches.sgi.com/support/free/security/advisories/20040505-01-U.asc - http://secunia.com/advisories/20202 - http://security.gentoo.org/glsa/glsa-2004
/security/advisories/20040505-01-U.asc - http://secunia.com/advisories/20202 - http://security.gentoo.org/glsa/glsa-200407-02.xml - http://secunia.com/advisories/20338
CVE ID: CVE-2004-0395 State: PUBLISHED Published: 2004-07-08T04:00:00 Last Updated: 2024-08-08T00:17:14.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users to execute arbitrary commands via shell metacharacters in a system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-509 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16273 - http://www.securityfocus.com/bid/10437
CVE ID: CVE-2004-0396 State: PUBLISHED Published: 2004-05-20T04:00:00 Last Updated: 2024-08-08T00:17:14.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11641 - http://secunia.com/advisories/11652 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A970 - http://marc.info/?l=bugtraq&m=108500040719512&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Ao
- http://marc.info/?l=bugtraq&m=108500040719512&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9058 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:048 - http://cert.uni-stuttgart.de/archive/bugtraq/2004/05/msg00219.html - http://marc.info/?l=openbsd-security-announce&m=108508894405639&w=2 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:10.cvs.asc - http://www.redhat.com/support/errata/RHSA-2004-190.html - http://secunia.com/advisories/11674 - http://security.gentoo.org/glsa/glsa-200405-12.xml - http://secunia.com/advisories/11651 - http://www.osvdb.org/6305 - http://www.us-cert.gov/cas/techalerts/TA04-147A.html -
http://secunia.com/advisories/11651 - http://www.osvdb.org/6305 - http://www.us-cert.gov/cas/techalerts/TA04-147A.html - http://www.ciac.org/ciac/bulletins/o-147.shtml - http://marc.info/?l=bugtraq&m=108498454829020&w=2 - http://secunia.com/advisories/11647 - http://marc.info/?l=bugtraq&m=108636445031613&w=2 - http://www.kb.cert.org/vuls/id/192038 - http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0980.html - http://www.debian.org/security/2004/dsa-505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16193 - http://security.e-matters.de/advisories/072004.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.395865 - ftp://ftp.
html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.395865 - ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2004-008.txt.asc - http://www.securityfocus.com/bid/10384 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021742.html
CVE ID: CVE-2004-0397 State: PUBLISHED Published: 2004-05-28T04:00:00 Last Updated: 2024-08-08T00:17:14.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a (1) DAV2 REPORT query or (2) get-dated-rev svn-protocol command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10386 - https://bugzilla.fedora.us/show_bug.cgi?id=1748 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021737.html - http://subversion.tigris.org/svn-sscanf-advisory.txt - http://marc.info/?l=bugtraq&
ll-disclosure/2004-May/021737.html - http://subversion.tigris.org/svn-sscanf-advisory.txt - http://marc.info/?l=bugtraq&m=108498676517697&w=2 - http://www.securityfocus.com/archive/1/363814 - http://www.linuxsecurity.com/advisories/fedora_advisory-4373.html - http://www.gentoo.org/security/en/glsa/glsa-200405-14.xml - http://www.osvdb.org/6301 - http://secunia.com/advisories/11675 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16191 - http://security.e-matters.de/advisories/082004.html - http://secunia.com/advisories/11642
CVE ID: CVE-2004-0398 State: PUBLISHED Published: 2004-05-20T04:00:00 Last Updated: 2024-08-08T00:17:14.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11638 - http://secunia.com/advisories/11673 - http://www.osvdb.org/6302 - http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0982.html - http://secunia.com/advisories/11650 - http://marc.info/?l=bugtr
eohapsis.com/archives/fulldisclosure/2004-05/0982.html - http://secunia.com/advisories/11650 - http://marc.info/?l=bugtraq&m=108500057108022&w=2 - http://security.gentoo.org/glsa/glsa-200405-13.xml - http://www.ciac.org/ciac/bulletins/o-148.shtml - http://security.gentoo.org/glsa/glsa-200405-15.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2004:049 - http://www.securityfocus.com/bid/10385 - http://www.debian.org/security/2004/dsa-506 - https://bugzilla.fedora.us/show_bug.cgi?id=1552 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16192 - http://www.debian.org/security/2004/dsa-507 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000841 - http://marc.info/?l=b
ian.org/security/2004/dsa-507 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000841 - http://marc.info/?l=bugtraq&m=108498433632333&w=2 - http://www.redhat.com/support/errata/RHSA-2004-191.html
CVE ID: CVE-2004-0399 State: PUBLISHED Published: 2004-05-12T04:00:00 Last Updated: 2024-08-08T00:17:14.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-502 - http://www.debian.org/security/2004/dsa-501 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021015.html - http://secunia.com/advisories/11558 - https://exchange.xforce.ibmcloud.com
ermail/full-disclosure/2004-May/021015.html - http://secunia.com/advisories/11558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16079 - http://www.guninski.com/exim1.html
CVE ID: CVE-2004-0400 State: PUBLISHED Published: 2004-05-12T04:00:00 Last Updated: 2024-08-08T00:17:14.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Exim 4 before 4.33, when the headers_check_syntax option is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code during the header check. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-502 - http://www.debian.org/security/2004/dsa-501 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021015.html - http://www.guninski.com/exim1.html - https://exchange.xforce.ibmcloud.com/vulnerabiliti
isclosure/2004-May/021015.html - http://www.guninski.com/exim1.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16077
CVE ID: CVE-2004-0401 State: PUBLISHED Published: 2004-05-14T04:00:00 Last Updated: 2024-08-08T00:17:14.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15126 - http://securitytracker.com/id?1010159 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16157 - http://www.backports.org/changelog.html - http://www.securityfocus.com/bid/10360 - http://packages.debian.org/changelogs/pool/main/libt/libtasn1-2/libtasn1-2_0.2.13-1/changelog
CVE ID: CVE-2004-0402 State: PUBLISHED Published: 2004-05-28T04:00:00 Last Updated: 2024-08-08T00:17:14.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in xpcd-svga in xpcd before 2.08, and possibly other versions, may allow local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16236 - http://www.debian.org/security/2004/dsa-508 - http://www.securityfocus.com/bid/10403 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:053
CVE ID: CVE-2004-0403 State: PUBLISHED Published: 2004-04-16T04:00:00 Last Updated: 2024-08-08T00:17:14.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:069 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A984 - http://securitytracker.com/id?1009937 - http://www.vuxml.org/freebsd/ccd698df-8e20-11d8-90d1-0020ed76ef5a.html - ftp://patches.sgi.com/support/free/s
?1009937 - http://www.vuxml.org/freebsd/ccd698df-8e20-11d8-90d1-0020ed76ef5a.html - ftp://patches.sgi.com/support/free/security/advisories/20040506-01-U.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/15893 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11220 - http://marc.info/?l=bugtraq&m=108369640424244&w=2 - http://secunia.com/advisories/11877 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt - http://www.securityfocus.com/bid/10172 - http://secunia.com/advisories/11410 - http://security.gentoo.org/glsa/glsa-200404-17.xml - http://sourceforge.net/project/shownotes.php?release_id=232288 - http://www.osvdb.org/5491
org/glsa/glsa-200404-17.xml - http://sourceforge.net/project/shownotes.php?release_id=232288 - http://www.osvdb.org/5491 - http://www.redhat.com/support/errata/RHSA-2004-165.html - http://www.kame.net/dev/cvsweb2.cgi/kame/kame/kame/racoon/isakmp.c.diff?r1=1.180&r2=1.181
CVE ID: CVE-2004-0404 State: PUBLISHED Published: 2004-04-20T04:00:00 Last Updated: 2024-08-08T00:17:14.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2004:155 - http://secunia.com/advisories/11399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15888 - http://www.debian.org/security/2004/dsa-488 - http://www.securityfocus.com/bid/10162
CVE ID: CVE-2004-0405 State: PUBLISHED Published: 2004-04-17T04:00:00 Last Updated: 2024-08-08T00:17:14.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15891 - http://www.debian.org/security/2004/dsa-486 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.40
security/2004/dsa-486 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.400181 - ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:07.cvs.asc - http://security.gentoo.org/glsa/glsa-200404-13.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10818 - http://marc.info/?l=bugtraq&m=108636445031613&w=2
CVE ID: CVE-2004-0406 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0407 State: PUBLISHED Published: 2004-04-17T04:00:00 Last Updated: 2024-08-08T00:17:14.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10158 - http://securitytracker.com/id?1009825 - http://secunia.com/advisories/11392 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15882 - http://www.osvdb.org
http://secunia.com/advisories/11392 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15882 - http://www.osvdb.org/5402 - http://marc.info/?l=bugtraq&m=108213782629001&w=2 - http://www.macromedia.com/devnet/security/security_zone/mpsb04-06.html
CVE ID: CVE-2004-0408 State: PUBLISHED Published: 2004-08-19T04:00:00 Last Updated: 2024-08-08T00:17:14.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the child_service function in the ident2 ident daemon allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15938 - http://www.securityfocus.com/bid/10192 - http://www.debian.org/security/2004/dsa-494
CVE ID: CVE-2004-0409 State: PUBLISHED Published: 2004-04-17T04:00:00 Last Updated: 2024-08-08T00:17:14.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-177.html - https://www.debian.org/security/2004/dsa-493 - http://www.xchat.org/ - http://www.redhat.com/support/errata/RHSA-2004-585.html - http://security.gentoo.org/glsa/glsa-200404-15.xml - http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_1230
- http://security.gentoo.org/glsa/glsa-200404-15.xml - http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_123013 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11312 - http://mail.nl.linux.org/xchat-announce/2004-04/msg00000.html
CVE ID: CVE-2004-0410 State: REJECTED Published: 2006-02-08T01:00:00Z Last Updated: 2024-09-16T22:45:41.647Z Description: No description available.
CVE ID: CVE-2004-0411 State: PUBLISHED Published: 2004-05-20T04:00:00 Last Updated: 2024-08-08T00:17:14.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which allows remote attackers to manipulate the options that are passed to the associated programs, possibly to read arbitrary files or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-222.html - http://www.novell.com/linux/security/advisories/2004_14_kdelibs.html - http: