Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-0997 State: PUBLISHED Published: 2006-05-31T10:00:00 Last Updated: 2024-08-08T00:39:00.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the ptrace MIPS assembly code in Linux kernel 2.4 before 2.4.17 allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://www.debian.org/security/2006/dsa-1082 - http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes - http://www.debian.org/security/2006/dsa-1070 - http://secunia.com/advisories/20162 - http://www.debian.org/security/
s - http://www.debian.org/security/2006/dsa-1070 - http://secunia.com/advisories/20162 - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - http://svn.debian.org/wsvn/kernel/patch-tracking/CVE-2004-0997?op=file&rev=0&sc=0 - http://secunia.com/advisories/20202 - http://www.securityfocus.com/bid/18176 - http://secunia.com/advisories/20338
CVE ID: CVE-2004-0998 State: PUBLISHED Published: 2004-12-31T05:00:00 Last Updated: 2024-08-08T00:38:59.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/995038 - http://www.debian.org/security/2004/dsa-616 - http://secunia.com/advisories/13663 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18654
CVE ID: CVE-2004-0999 State: PUBLISHED Published: 2004-12-31T05:00:00 Last Updated: 2024-08-08T00:39:00.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: zgv 5.5.3 allows remote attackers to cause a denial of service (application crash via segmentation fault) via crafted multiple-image (animated) GIF images. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-608 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18480 - http://www.securityfocus.com/bid/11915
CVE ID: CVE-2004-1000 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:39:00.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18808 - http://secunia.com/advisories/13771 - http://www.debian.org/security/2004/dsa-630
CVE ID: CVE-2004-1001 State: PUBLISHED Published: 2004-11-04T05:00:00 Last Updated: 2024-08-08T00:38:59.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pam_chauthtok function call is not properly handled. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13028 - http://www.debian.org/security/2004/dsa-585 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000894 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17902
CVE ID: CVE-2004-1002 State: PUBLISHED Published: 2004-11-04T05:00:00 Last Updated: 2024-08-08T00:39:00.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppd to access an incorrect memory location. Additional Analyst Notes: - CVE Program Container: References: - https://www.ubuntu.com/usn/usn-12-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/17874 - http://www.securityfocus.com/archive/1/379450
CVE ID: CVE-2004-1003 State: PUBLISHED Published: 2004-11-04T05:00:00 Last Updated: 2024-08-08T00:38:59.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend ScanMail allows remote attackers to obtain potentially sensitive information or disable the anti-virus capability via the smency.nsf file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17962 - http://cgi.nessus.org/plugins/dump.php3?id=14312
CVE ID: CVE-2004-1004 State: PUBLISHED Published: 2005-01-22T05:00:00 Last Updated: 2024-08-08T00:38:59.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13863/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18902 - http://www.redhat.com/support/errata/RHSA-2005-217.html - http://www.debian.org/security/2005/dsa-639 - http://www.gentoo.org/security/en/glsa/glsa-200502-24.xml
CVE ID: CVE-2004-1005 State: PUBLISHED Published: 2005-01-22T05:00:00 Last Updated: 2024-08-08T00:39:00.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13863/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18898 - http://www.redhat.com/support/errata/RHSA-2005-217.html - http://www.debian.org/security/2005/dsa-639 - http://www.gentoo.org/security/en/glsa/glsa-200502-24.xml
CVE ID: CVE-2004-1006 State: PUBLISHED Published: 2004-11-19T05:00:00 Last Updated: 2024-08-08T00:39:00.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109968710822449&w=2 - http://www.kb.cert.org/vuls/id/448384 - http://www.securityfocus.com/bid/11591 - http://archives.neohapsis.com/archives/bugtraq/2004-10/0287.html - http://www.debian.org/security/2004/dsa-584 - https://exchange.xforce.ib
hapsis.com/archives/bugtraq/2004-10/0287.html - http://www.debian.org/security/2004/dsa-584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17963 - http://archives.neohapsis.com/archives/bugtraq/2004-11/0037.html - http://www.redhat.com/support/errata/RHSA-2005-212.html
CVE ID: CVE-2004-1007 State: PUBLISHED Published: 2004-11-04T05:00:00 Last Updated: 2024-08-08T00:38:59.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service (application crash) via mail headers that cause a line feed (LF) to be replaced by a null byte that is written to an incorrect memory address. Additional Analyst Notes: - CVE Program Container: References: - http://bogofilter.sourceforge.net/security/bogofilter-SA-2004-01 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17916
CVE ID: CVE-2004-1008 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the ssh2_rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2_MSG_DEBUG packet with a modified stringlen parameter, which leads to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002414 - http://secunia.com/advisories/13012/ - http://www.idefense.com/application/poi/display?id=155&type=vulnerabilities&flashstatus=true - http://www.chiark.greenend.org.uk/~sgtatham/putty/
plication/poi/display?id=155&type=vulnerabilities&flashstatus=true - http://www.chiark.greenend.org.uk/~sgtatham/putty/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/17886 - http://secunia.com/advisories/12987/ - http://www.securityfocus.com/bid/11549 - http://marc.info/?l=bugtraq&m=109889312917613&w=2 - http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002416 - http://secunia.com/advisories/17214 - http://www.gentoo.org/security/en/glsa/glsa-200410-29.xml
CVE ID: CVE-2004-1009 State: PUBLISHED Published: 2005-01-22T05:00:00 Last Updated: 2024-08-08T00:38:59.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18903 - http://secunia.com/advisories/13863/ - http://www.debian.org/security/2005/dsa-639 - http://www.redhat.com/support/errata/RHSA-2005-512.html
CVE ID: CVE-2004-1010 State: PUBLISHED Published: 2004-11-09T05:00:00 Last Updated: 2024-08-08T00:39:00.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11603 - http://www.ciac.org/ciac/bulletins/p-072.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9848 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17956 - http://www.info-zip.org/F
l%3Aorg.mitre.oval%3Adef%3A9848 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17956 - http://www.info-zip.org/FAQ.html - http://www.hexview.com/docs/20041103-1.txt - https://bugzilla.fedora.us/show_bug.cgi?id=2255 - http://www.turbolinux.com/security/2005/TLSA-2005-18.txt - http://www.debian.org/security/2005/dsa-624 - http://security.gentoo.org/glsa/glsa-200411-16.xml - http://www.redhat.com/support/errata/RHSA-2004-634.html - http://secunia.com/advisories/13094/ - http://www.mandriva.com/security/advisories?name=MDKSA-2004:141 - https://usn.ubuntu.com/18-1/ - http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028379.html - http://marc.info/?l=bugtraq&m=10995884061105
p://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028379.html - http://marc.info/?l=bugtraq&m=109958840611053&w=2
CVE ID: CVE-2004-1011 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015. Additional Analyst Notes: - CVE Program Container: References: - http://security.e-matters.de/advisories/152004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18198 - http://asg.web.cmu.edu/cyrus/download/imapd/changes.html - http://www.mandriva.com/security/advisories?n
ilities/18198 - http://asg.web.cmu.edu/cyrus/download/imapd/changes.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:139 - http://marc.info/?l=bugtraq&m=110123023521619&w=2 - http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=143 - http://secunia.com/advisories/13274/ - http://security.gentoo.org/glsa/glsa-200411-34.xml
CVE ID: CVE-2004-1012 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index increment error that leads to an out-of-bounds memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-597 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18199 - http://security.e-matters.de/advisories/152004
04/dsa-597 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18199 - http://security.e-matters.de/advisories/152004.html - http://asg.web.cmu.edu/cyrus/download/imapd/changes.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:139 - http://marc.info/?l=bugtraq&m=110123023521619&w=2 - http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=143 - http://secunia.com/advisories/13274/ - http://security.gentoo.org/glsa/glsa-200411-34.xml - https://www.ubuntu.com/usn/usn-31-1/
CVE ID: CVE-2004-1013 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:38:59.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an index increment error that leads to an out-of-bounds memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-597 - http://security.e-matters.de/advisories/152004.html - http://asg.web.cmu.edu/cyrus/download/imapd/changes.html - ht
97 - http://security.e-matters.de/advisories/152004.html - http://asg.web.cmu.edu/cyrus/download/imapd/changes.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:139 - http://marc.info/?l=bugtraq&m=110123023521619&w=2 - http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=143 - http://secunia.com/advisories/13274/ - http://security.gentoo.org/glsa/glsa-200411-34.xml - https://www.ubuntu.com/usn/usn-31-1/
CVE ID: CVE-2004-1014 State: PUBLISHED Published: 2004-12-08T05:00:00 Last Updated: 2024-08-08T00:38:59.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-606 - http://www.redhat.com/support/errata/RHSA-2005-014.html - http://www.redhat.com/support/errata/RHSA-2004-583.html - http://www.securityfocus.com/bid/11785 - http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/Chan
a/RHSA-2004-583.html - http://www.securityfocus.com/bid/11785 - http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258&view=markup - http://www.securityfocus.com/archive/1/426072/30/6740/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10899 - https://www.ubuntu.com/usn/usn-36-1/ - http://www.trustix.org/errata/2004/0065/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18332
CVE ID: CVE-2004-1015 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004-1011. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18274 - http://asg.web.cmu.edu/cyrus/download/imapd/changes.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:139 - http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&m
om/security/advisories?name=MDKSA-2004:139 - http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=145 - http://security.gentoo.org/glsa/glsa-200411-34.xml
CVE ID: CVE-2004-1016 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:38:59.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users to cause a denial of service (system hang) via crafted auxiliary messages that are passed to the sendmsg function, which causes a deadlock condition. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18483 - http://www.debian.org/security/2006/dsa-1082 - http://www.mandriva.com/security/advisories?name=MDKS
erabilities/18483 - http://www.debian.org/security/2006/dsa-1082 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 - http://www.redhat.com/support/errata/RHSA-2005-017.html - https://bugzilla.fedora.us/show_bug.cgi?id=2336 - https://www.ubuntu.com/usn/usn-38-1/ - http://www.novell.com/linux/security/advisories/2004_44_kernel.html - http://www.debian.org/security/2006/dsa-1070 - http://www.redhat.com/support/errata/RHSA-2004-689.html - http://www.redhat.com/support/errata/RHSA-2005-016.html - http://secunia.com/advisories/20162 - http://www.securityfocus.com/bid/11921 - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - https://oval.c
bid/11921 - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11816 - http://secunia.com/advisories/20202 - http://isec.pl/vulnerabilities/isec-0019-scm.txt - http://secunia.com/advisories/20338
CVE ID: CVE-2004-1017 State: PUBLISHED Published: 2004-12-31T05:00:00 Last Updated: 2024-08-08T00:38:59.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple "overflows" in the io_edgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://www.debian.org/security/2006/dsa-1082 - http://www.securityfocus.com/bid/12102 - http://www.redhat.com/support/errata/RHSA-2005-017.html - https://bugzilla.fedora.us/show_bug.cgi?id=2336 - http://www.debian.org/security/2006/dsa-1070 - http://www.redhat.com/support/errata/RHSA-2004-689.html - http://www
36 - http://www.debian.org/security/2006/dsa-1070 - http://www.redhat.com/support/errata/RHSA-2004-689.html - http://www.redhat.com/support/errata/RHSA-2005-016.html - http://secunia.com/advisories/20162 - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9786 - http://www.debian.org/security/2006/dsa-1017 - http://secunia.com/advisories/20202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18433 - http://secunia.com/advisories/19374 - http://secunia.com/advisories/20338
CVE ID: CVE-2004-1018 State: PUBLISHED Published: 2004-12-08T05:00:00 Last Updated: 2024-08-08T00:39:00.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via (1) a negative offset value to the shmop_write function, (2) an "integer overflow/underflow" in the pack function, or (3) an "integer overflow/underflow" in the unpack function. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further disc
ut that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-032.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10949 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:072 - http://www.php.net/release_4_3_10.php - http://www.osvdb.org/12411 - http://www.redhat.com/support/errata/RHSA-2005-816.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:151 - http://www.hardened-php.net/advisories/012004.txt - https://exchange.xforce.ibmcloud.com/vulner
es?name=MDKSA-2004:151 - http://www.hardened-php.net/advisories/012004.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/18515 - https://bugzilla.fedora.us/show_bug.cgi?id=2344 - http://www.securityfocus.com/archive/1/384920 - http://www.securityfocus.com/advisories/9028 - http://www.securityfocus.com/bid/12045 - http://marc.info/?l=bugtraq&m=110314318531298&w=2 - https://www.ubuntu.com/usn/usn-99-1/
CVE ID: CVE-2004-1019 State: PUBLISHED Published: 2004-12-22T05:00:00 Last Updated: 2024-08-08T00:39:00.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-032.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18514 - http://lists.opensuse.org/opensuse-securit
-2005-032.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18514 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html - http://www.novell.com/linux/security/advisories/2005_02_php4_mod_php4.html - http://www.php.net/release_4_3_10.php - http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10511 - http://www.redhat.com/support/errata/RHSA-2005-816.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:151 - http://www.hardened-php.net/advisories/012004.txt - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - https://b
p.net/advisories/012004.txt - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - https://bugzilla.fedora.us/show_bug.cgi?id=2344 - http://msgs.securepoint.com/cgi-bin/get/bugtraq0412/157.html - http://www.securityfocus.com/advisories/9028 - http://www.redhat.com/support/errata/RHSA-2004-687.html - http://marc.info/?l=bugtraq&m=110314318531298&w=2
CVE ID: CVE-2004-1020 State: PUBLISHED Published: 2004-12-08T05:00:00 Last Updated: 2024-08-08T00:39:00.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may allow remote attackers to read arbitrary files in PHP applications that contain a directory traversal vulnerability in require or include statements, but are otherwise protected by the magic_quotes_gpc mechanism. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion. Additional Analyst Note
ispute. This candidate may change significantly in the future as a result of further discussion. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18516 - http://www.php.net/release_4_3_10.php - http://www.mandriva.com/security/advisories?name=MDKSA-2004:151 - http://www.securityfocus.com/bid/11981 - http://www.securityfocus.com/archive/1/384663 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000915 - http://www.gentoo.org/security/en/glsa/glsa-200412-14.xml - http://www.securityfocus.com/advisories/9028