Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
com/research/advisories/2004/a050304-1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16049 - http://securitytracker.com/id?1010039 - http://www.kb.cert.org/vuls/id/648406 - http://www.securiteam.com/securitynews/5QP0115CUO.html - http://lists.apple.com/mhonarc/security-announce/msg00049.html - http://secunia.com/advisories/11539
CVE ID: CVE-2004-0431 State: PUBLISHED Published: 2004-05-06T04:00:00 Last Updated: 2024-08-08T00:17:14.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/mhonarc/security-announce/msg00048.html - http://marc.info/?l=ntbugtraq&m=108356485013237&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16026 - http://www.kb.cert.org/vuls/id/782958 -
8356485013237&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16026 - http://www.kb.cert.org/vuls/id/782958 - http://marc.info/?l=bugtraq&m=108360110618389&w=2
CVE ID: CVE-2004-0432 State: PUBLISHED Published: 2004-05-05T04:00:00 Last Updated: 2024-08-08T00:17:15.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16038 - http://marc.info/?l=bugtraq&m=108335051011341&w=2 - http://bugs.proftpd.org/show_bug.cgi?id=2267 - http://marc.info/?l=bugtraq&m=108335030208523&w=2 - http://secunia.com/advisories/11527 - ht
.org/show_bug.cgi?id=2267 - http://marc.info/?l=bugtraq&m=108335030208523&w=2 - http://secunia.com/advisories/11527 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:041
CVE ID: CVE-2004-0433 State: PUBLISHED Published: 2004-05-05T04:00:00 Last Updated: 2024-08-08T00:17:14.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP (realrtsp) streams, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (a) long URLs, (b) long Real server responses, or (c) long Real Data Transport (RDT) packets. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16019 - http://www.xinehq.de
- CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16019 - http://www.xinehq.de/index.php/security/XSA-2004-3 - http://security.gentoo.org/glsa/glsa-200405-24.xml
CVE ID: CVE-2004-0434 State: PUBLISHED Published: 2004-05-12T04:00:00 Last Updated: 2024-08-08T00:17:14.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leads to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16071 - http://www.debian.org/security/2004/dsa-504 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020998.html - http://marc.info/?l=bugtraq&m=108386148126457&w=2 - http://security.g
k/pipermail/full-disclosure/2004-May/020998.html - http://marc.info/?l=bugtraq&m=108386148126457&w=2 - http://security.gentoo.org/glsa/glsa-200405-23.xml - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:09.kadmind.asc
CVE ID: CVE-2004-0435 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T00:17:14.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not properly handle the MS_INVALIDATE operation, which leads to cache consistency problems that allow a local user to prevent certain changes to files from being committed to disk. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10416 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:11.msync.asc - http://secunia.com/advisories/11714 - https://exchange.x
sd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:11.msync.asc - http://secunia.com/advisories/11714 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16254
CVE ID: CVE-2004-0437 State: PUBLISHED Published: 2004-05-06T04:00:00 Last Updated: 2024-08-08T00:17:14.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Titan FTP Server version 3.01 build 163, and possibly other versions before build 169, allows remote authenticated users to cause a denial of service (crash) by disconnecting from the system during a "LIST -L" command, which causes Titan to access an invalid socket. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16057 - http://www.securiteam.com/windowsntfocus/5RP0215CUU.html - http://marc.info/?l=bugtraq&m=108378048513596&w=2 - http://archives.neohapsis.co
am.com/windowsntfocus/5RP0215CUU.html - http://marc.info/?l=bugtraq&m=108378048513596&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0025.html
CVE ID: CVE-2004-0444 State: PUBLISHED Published: 2004-05-20T04:00:00 Last Updated: 2024-08-08T00:17:14.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allow remote attackers to cause a denial of service or execute arbitrary code via (1) a manipulated length byte in the first-level decoding routine for NetBIOS Name Service (NBNS) that modifies an index variable and leads to a stack-based buffer overflow, (2) a heap-based corruption p
Service (NBNS) that modifies an index variable and leads to a stack-based buffer overflow, (2) a heap-based corruption problem in an NBNS response that is missing certain RR fields, and (3) a stack-based buffer overflow in the DNS component via a Resource Record (RR) with a long canonical name (CNAME) field composed of many smaller components. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/6099 - http://www.kb.cert.org/vuls/id/634414 - http://securitytracker.com/id?1010146 - http://securitytracker.com/id?1010145 - http://www.kb.cert.org/vuls/id/637318 - http://www.securityfocus.com/bid/10335 - http://www.ciac.org/ciac/bulletins/o-141.shtml - http://list
g/vuls/id/637318 - http://www.securityfocus.com/bid/10335 - http://www.ciac.org/ciac/bulletins/o-141.shtml - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021360.html - http://www.kb.cert.org/vuls/id/294998 - http://www.securityfocus.com/bid/10333 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16134 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021361.html - http://www.osvdb.org/6101 - http://www.osvdb.org/6102 - http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16137 - http://securitytracker.com/id?1010144 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021
bilities/16137 - http://securitytracker.com/id?1010144 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021362.html - http://www.securityfocus.com/bid/10334 - http://secunia.com/advisories/11066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16135
CVE ID: CVE-2004-0445 State: PUBLISHED Published: 2004-05-20T04:00:00 Last Updated: 2024-08-08T00:17:14.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1010146 - http://securitytracker.com/id?10101
otes: - CVE Program Container: References: - http://securitytracker.com/id?1010146 - http://securitytracker.com/id?1010145 - http://www.ciac.org/ciac/bulletins/o-141.shtml - http://www.kb.cert.org/vuls/id/682110 - http://www.osvdb.org/6100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16132 - http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html - http://securitytracker.com/id?1010144 - http://secunia.com/advisories/11066 - http://www.securityfocus.com/bid/10336
CVE ID: CVE-2004-0447 State: PUBLISHED Published: 2004-07-09T04:00:00 Last Updated: 2024-08-08T00:17:14.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact. NOTE: due to a typo, this issue was accidentally assigned CVE-2004-0477. This is the proper candidate to use for the Linux local DoS. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16661 - http://www.redhat.com/support/errata/RHSA
04-q2/0038.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16661 - http://www.redhat.com/support/errata/RHSA-2004-413.html - http://www.debian.org/security/2006/dsa-1082 - http://security.gentoo.org/glsa/glsa-200407-16.xml - http://www.debian.org/security/2006/dsa-1070 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10918 - http://secunia.com/advisories/20162 - http://www.securityfocus.com/bid/10783 - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - http://www.ciac.org/ciac/bulletins/o-193.shtml - http://secunia.com/advisories/20202 - ftp://patches.sgi.com/support/free/security/advisories/200408
letins/o-193.shtml - http://secunia.com/advisories/20202 - ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc - http://secunia.com/advisories/20338
CVE ID: CVE-2004-0448 State: PUBLISHED Published: 2004-07-08T04:00:00 Last Updated: 2024-08-08T00:17:15.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16271 - http://www.debian.org/security/2004/dsa-510 - http://www.securityfocus.com/bid/10438
CVE ID: CVE-2004-0449 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0450 State: PUBLISHED Published: 2004-06-08T04:00:00 Last Updated: 2024-08-08T00:17:14.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by log2mail. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10460 - http://www.debian.org/security/2004/dsa-513 - http://felinemenace.org/~jaguar/advisories/log2mail.txt - http://osvdb.org/6711 - http://secunia.com/advisories/11769 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
l.txt - http://osvdb.org/6711 - http://secunia.com/advisories/11769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16311 - http://secunia.com/advisories/11768
CVE ID: CVE-2004-0451 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:17:14.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1010539 - http://www.debian.org/security/2004/dsa-521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16459 - http://www.securityfocus.com/bid/10571
CVE ID: CVE-2004-0452 State: PUBLISHED Published: 2004-12-31T05:00:00 Last Updated: 2024-08-08T00:17:14.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-105.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9938 - http://www.redhat.com/support/errata/RHSA-2005-103.htm
repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9938 - http://www.redhat.com/support/errata/RHSA-2005-103.html - http://secunia.com/advisories/55314 - http://www.debian.org/security/2004/dsa-620 - ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U - http://fedoranews.org/updates/FEDORA--.shtml - http://secunia.com/advisories/12991 - http://marc.info/?l=bugtraq&m=110547693019788&w=2 - https://www.ubuntu.com/usn/usn-44-1/ - http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml - http://www.securityfocus.com/bid/12072 - http://secunia.com/advisories/18517 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18650
CVE ID: CVE-2004-0453 State: PUBLISHED Published: 2004-06-24T04:00:00 Last Updated: 2024-08-08T00:17:14.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service (emulator crash) and possibly execute arbitrary code via format string specifiers in an output string. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108723630730487&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16404 - http://www.securityfocus.com/bid/10543
CVE ID: CVE-2004-0454 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:17:14.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the msg function for rlpr daemon (rlprd) 2.04 allows local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16454 - http://www.securityfocus.com/bid/10578 - http://www.debian.org/security/2004/dsa-524
CVE ID: CVE-2004-0455 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:17:14.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-523 - http://www.securityfocus.com/bid/10577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16455
CVE ID: CVE-2004-0456 State: PUBLISHED Published: 2004-07-06T04:00:00 Last Updated: 2024-08-08T00:17:14.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in pavuk 0.9pl28, 0.9pl27, and possibly other versions allows remote web sites to execute arbitrary code via a long HTTP Location header. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-527 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16551 - http://www.securityfocus.com/bid/10633 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023322.html - http://security.gentoo.org/glsa/glsa-200406-22.xml
CVE ID: CVE-2004-0457 State: PUBLISHED Published: 2004-08-19T04:00:00 Last Updated: 2024-08-08T00:17:14.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://packages.debian.org/changelogs/pool/main/m/mysql-dfsg/mysql-dfsg_4.0.20-11/changelog - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10693 - http://www.debian.org/security/2004/dsa-540 - http://www.redhat.com/support/err
on/oval%3Aorg.mitre.oval%3Adef%3A10693 - http://www.debian.org/security/2004/dsa-540 - http://www.redhat.com/support/errata/RHSA-2004-597.html - http://www.ciac.org/ciac/bulletins/p-018.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17030
CVE ID: CVE-2004-0458 State: PUBLISHED Published: 2004-08-19T04:00:00 Last Updated: 2025-01-16T17:35:50.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: mah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which triggers a null pointer dereference. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/10343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16143 - http://www.debian.org/security/2004/dsa-503
CVE ID: CVE-2004-0459 State: PUBLISHED Published: 2004-05-20T04:00:00 Last Updated: 2024-08-08T00:17:14.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Clear Channel Assessment (CCA) algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy (aka "jabber"), which prevents devices from transmitting data. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2004-009.pdf - http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0631.html - http://www.osvdb.org/16034 - ht
2004-009.pdf - http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0631.html - http://www.osvdb.org/16034 - http://securitytracker.com/id?1010152 - http://www.auscert.org.au/render.html?it=4091 - http://www.kb.cert.org/vuls/id/106678 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16138 - http://www.securityfocus.com/bid/10342
CVE ID: CVE-2004-0460 State: PUBLISHED Published: 2004-06-24T04:00:00 Last Updated: 2024-08-08T00:17:15.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/317350 - http://www.securityfocus.com/bid/10590 - http://www.ma
Container: References: - http://www.kb.cert.org/vuls/id/317350 - http://www.securityfocus.com/bid/10590 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:061 - http://secunia.com/advisories/23265 - http://marc.info/?l=bugtraq&m=108795911203342&w=2 - http://marc.info/?l=bugtraq&m=108938625206063&w=2 - http://www.novell.com/linux/security/advisories/2004_19_dhcp_server.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16475 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf - http://www.us-cert.gov/cas/techalerts/TA04-174A.html - http://marc.info/?l=bugtraq&m=108843959502356&w=2
CVE ID: CVE-2004-0461 State: PUBLISHED Published: 2004-06-24T04:00:00 Last Updated: 2024-08-08T00:17:15.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/654390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16476 - http://www.ma
es: - http://www.kb.cert.org/vuls/id/654390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16476 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:061 - http://secunia.com/advisories/23265 - http://marc.info/?l=bugtraq&m=108795911203342&w=2 - http://marc.info/?l=bugtraq&m=108938625206063&w=2 - http://www.novell.com/linux/security/advisories/2004_19_dhcp_server.html - http://www.securityfocus.com/bid/10591 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf - http://www.us-cert.gov/cas/techalerts/TA04-174A.html - http://marc.info/?l=bugtraq&m=108843959502356&w=2
CVE ID: CVE-2004-0462 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T00:17:14.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session with the same server. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17702 - http://www.kb.cert.org/vuls/id/546483
CVE ID: CVE-2004-0463 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0464 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0465 State: PUBLISHED Published: 2005-02-23T05:00:00 Last Updated: 2024-08-08T00:17:15.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequences in the WCP_USER parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/628411 - http://www.kb.cert.org/vuls/id/JSHA-69HVPK - http://www.cirt.dk/advisories/cirt-29-advisory.pdf - http://marc.info/?l=bugtraq&m=110910838600145&w=2 - https://exchange.xforce.ibmcloud.com/vulnerab
cirt-29-advisory.pdf - http://marc.info/?l=bugtraq&m=110910838600145&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19394 - http://secunia.com/advisories/14006/
CVE ID: CVE-2004-0466 State: PUBLISHED Published: 2005-02-23T05:00:00 Last Updated: 2024-08-08T00:17:15.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service (hang) via a URL containing an MS-DOS device name such as (1) AUX, (2) CON, (3) PRN, (4) COM1, or (5) LPT1. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/JSHA-69FVMM - http://www.cirt.dk/advisories/cirt-29-advisory.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/19393 - http://marc.info/?l=bugtraq&m=110910838600145&w=2 - http://secunia.com/advisories/14006/ - htt