Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-2755 State: PUBLISHED Published: 2007-11-15T23:00:00 Last Updated: 2024-08-08T01:36:25.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62 allows remote attackers to inject arbitrary web script or HTML via the query string in blocked URLs that are listed in (1) error or (2) block page messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/alerts/2004/Jan/1008711.html - http://www.securityfocus.com/bid/9418 - http://secunia.com/advisories/10618 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14825 - http:
.com/bid/9418 - http://secunia.com/advisories/10618 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14825 - http://securityresponse.symantec.com/avcenter/security/Content/2004.01.13.html - http://www.osvdb.org/6754
CVE ID: CVE-2004-2756 State: PUBLISHED Published: 2007-11-20T01:00:00Z Last Updated: 2024-09-16T23:35:27.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in viewtopic.php in Xoops 2.x, possibly 2 through 2.0.5, allows remote attackers to inject arbitrary web script or HTML via the (1) forum and (2) topic_id parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9497 - http://securitytracker.com/id?1008849
CVE ID: CVE-2004-2757 State: PUBLISHED Published: 2007-11-20T02:00:00 Last Updated: 2024-08-08T01:36:25.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the failed login page in Novell iChain before 2.2 build 2.2.113 and 2.3 First Customer Ship (FCS) allows remote attackers to inject arbitrary web script or HTML via url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14873 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10080762.htm - http://www.securityfocus.com/bid/9412
CVE ID: CVE-2004-2758 State: PUBLISHED Published: 2007-12-06T02:00:00 Last Updated: 2024-08-08T01:36:25.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the H.323 protocol implementation for Sun SunForum 3.2 and 3D 1.0 allow remote attackers to cause a denial of service (segmentation fault and process crash), as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14173 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101429-1 - http://securitytracker.com/id?1008749 - http://secunia.com/advi
olve.sun.com/search/document.do?assetkey=1-26-101429-1 - http://securitytracker.com/id?1008749 - http://secunia.com/advisories/10665 - http://www.kb.cert.org/vuls/id/749342 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57476-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000135.1-1 - http://www.uniras.gov.uk/vuls/2004/006489/h323.htm - http://www.cert.org/advisories/CA-2004-01.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200181-1
CVE ID: CVE-2004-2759 State: PUBLISHED Published: 2008-03-11T00:00:00 Last Updated: 2024-08-08T01:36:25.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shared Sun StorEdge QFS and SAM-QFS file systems, as used in Utilization Suite 4.0 through 4.1 and Performance Suite 4.0 through 4.1, might allow local users to read portions of deleted files by accessing data within sparse files. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200184-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101527-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17901 - http://www.securityfocus.com/bid/11559
CVE ID: CVE-2004-2760 State: PUBLISHED Published: 2008-08-04T10:00:00 Last Updated: 2024-08-08T01:36:25.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection after a root login attempt with the correct password, but leaves the connection open after an attempt with an incorrect password, which makes it easier for remote attackers to guess the password by observing the connection state, a different vulnerability than CVE-2003-0190. NOTE: it could be argued that in most environments, this does not cross privilege boundaries without requiring leverage of a separate vulnerability. Additional A
ironments, this does not cross privilege boundaries without requiring leverage of a separate vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/360198 - http://archive.cert.uni-stuttgart.de/bugtraq/2004/04/msg00162.html - http://securityreason.com/securityalert/4100
CVE ID: CVE-2004-2761 State: PUBLISHED Published: 2009-01-05T20:00:00 Last Updated: 2024-08-08T01:36:25.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm of an X.509 certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33065 - https://rhn.redhat.com/errata/RHSA-2010-0837.html - http://www.phreedom.org/research/rogue-ca/ - http://www.kb.cert.org/vuls/id/836068 - http://securityreason.com/securityalert/4866 - h
reedom.org/research/rogue-ca/ - http://www.kb.cert.org/vuls/id/836068 - http://securityreason.com/securityalert/4866 - http://blog.mozilla.com/security/2008/12/30/md5-weaknesses-could-lead-to-certificate-forgery/ - http://www.cisco.com/en/US/products/products_security_response09186a0080a5d24a.html - http://www.win.tue.nl/hashclash/SoftIntCodeSign/ - http://secunia.com/advisories/33826 - http://secunia.com/advisories/34281 - http://www.microsoft.com/technet/security/advisory/961509.mspx - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03814en_us - http://blogs.technet.com/swi/archive/2008/12/30/information-regarding-md5-collisions-problem.aspx - http://www
14en_us - http://blogs.technet.com/swi/archive/2008/12/30/information-regarding-md5-collisions-problem.aspx - http://www.doxpara.com/research/md5/md5_someday.pdf - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 - https://rhn.redhat.com/errata/RHSA-2010-0838.html - https://blogs.verisign.com/ssl-blog/2008/12/on_md5_vulnerabilities_and_mit.php - http://www.ubuntu.com/usn/usn-740-1 - http://securitytracker.com/id?1024697 - https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00096.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888 - http://www.securityfocus.com/archive/1/499685/100/0/threaded - https://h20566.www2.hpe.com
play?docId=emr_na-c05336888 - http://www.securityfocus.com/archive/1/499685/100/0/threaded - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935 - http://secunia.com/advisories/42181 - http://www.win.tue.nl/hashclash/rogue-ca/ - https://bugzilla.redhat.com/show_bug.cgi?id=648886
CVE ID: CVE-2004-2762 State: PUBLISHED Published: 2009-03-31T18:00:00 Last Updated: 2024-08-08T01:36:25.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in IBM Tivoli Storage Manager (TSM) 4.2.x on MVS, 5.1.9.x before 5.1.9.1, 5.1.x before 5.1.10, 5.2.2.x before 5.2.2.3, 5.2.x before 5.2.3, 5.3.x before 5.3.0, and 6.x before 6.1, when the HTTP communication method is enabled, allows remote attackers to cause a denial of service (daemon crash or hang) via unspecified HTTP traffic, as demonstrated by the IBM port scanner 1.3.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0881 - http://www-01.ibm.com/sup
es: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0881 - http://www-01.ibm.com/support/docview.wss?uid=swg21375360 - http://www.securityfocus.com/bid/34285 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC39395 - http://www-01.ibm.com/support/docview.wss?uid=swg21246076 - http://secunia.com/advisories/34498 - http://securitytracker.com/id?1021946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49535
CVE ID: CVE-2004-2763 State: PUBLISHED Published: 2009-06-01T22:00:00Z Last Updated: 2024-09-17T00:11:42.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/867593 - http://archive.cert.uni-stuttgart.de/uniras/2004/02/msg00007.html - http://www.cgisecurity.com/whitehat-mirror/WH-WhitePaper_XST_ebook.
cert.uni-stuttgart.de/uniras/2004/02/msg00007.html - http://www.cgisecurity.com/whitehat-mirror/WH-WhitePaper_XST_ebook.pdf
CVE ID: CVE-2004-2764 State: PUBLISHED Published: 2009-06-02T10:00:00 Last Updated: 2024-08-08T01:36:25.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML sniffing." Additional Analyst Notes: - CVE Program Container: References: - http://groups.google.com/group/comp.security.unix/tree/browse_frm/month/2004-10/fe63f1daa9689d50?rnum=161&_done=%2Fgroup%2Fcomp.security.unix%2Fbrowse_frm%2Fmon
rity.unix/tree/browse_frm/month/2004-10/fe63f1daa9689d50?rnum=161&_done=%2Fgroup%2Fcomp.security.unix%2Fbrowse_frm%2Fmonth%2F2004-10%3Ffwc%3D1%26#doc_29036353582c690d - https://exchange.xforce.ibmcloud.com/vulnerabilities/16864 - http://www.osvdb.org/8288 - http://archive.cert.uni-stuttgart.de/uniras/2004/08/msg00007.html - http://securitytracker.com/id?1011661 - http://www.securityfocus.com/archive/1/371208 - http://secunia.com/advisories/12206 - http://groups.google.com/group/comp.security.unix/tree/browse_frm/month/2004-10/fe63f1daa9689d50?rnum=161&_done=%2Fgroup%2Fcomp.security.unix%2Fbrowse_frm%2Fmonth%2F2004-10%3Ffwc%3D1%26#doc_29036353582c690d - http://www.securityfocus.com/bid/10844
CVE ID: CVE-2004-2765 State: PUBLISHED Published: 2010-01-28T20:00:00Z Last Updated: 2024-09-16T18:28:59.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, a different vulnerability than CVE-2005-2022 and CVE-2006-5486. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201601-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-116568-56-1
CVE ID: CVE-2004-2766 State: PUBLISHED Published: 2010-01-28T20:00:00Z Last Updated: 2024-09-16T23:01:25.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to obtain unspecified "access" to e-mail via a crafted e-mail message, related to a "session hijacking" issue, a different vulnerability than CVE-2005-2022 and CVE-2006-5486. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201180-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-116568-55-1
CVE ID: CVE-2004-2767 State: PUBLISHED Published: 2010-04-05T15:15:00Z Last Updated: 2024-09-16T22:14:56.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service (connection slot exhaustion) by establishing many FTP sessions that persist for the lifetime of a DS session. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE ID: CVE-2004-2768 State: PUBLISHED Published: 2010-06-08T18:00:00 Last Updated: 2024-08-08T01:36:25.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid file, (2) setgid file, or (3) device, a related issue to CVE-2010-2059. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59428 - http://www.hackinglinuxexposed.com/articles/20031214.html - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=225692 - htt
tp://www.hackinglinuxexposed.com/articles/20031214.html - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=225692 - http://lists.jammed.com/ISN/2003/12/0056.html - https://bugzilla.redhat.com/show_bug.cgi?id=598775
CVE ID: CVE-2004-2769 State: PUBLISHED Published: 2010-07-02T20:00:00Z Last Updated: 2024-09-17T04:23:58.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the (1) MLSD or (2) MLST commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40370 - http://www.cerberusftp.com/phpBB3/viewtopic.php?f=4&t=644 - http://www.cerberusftp.com/releasenotes.html - http://www.securityfocus.com/bid/41285
CVE ID: CVE-2004-2770 State: REJECTED Published: 2011-09-25T10:00:00 Last Updated: 2011-09-29T09:00:00 Description: No description available.
CVE ID: CVE-2004-2771 State: PUBLISHED Published: 2014-12-24T18:00:00 Last Updated: 2024-08-08T01:36:25.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address. Additional Analyst Notes: - CVE Program Container: References: - http://linux.oracle.com/errata/ELSA-2014-1999.html - http://www.debian.org/security/2014/dsa-3105 - http://secunia.com/advisories/61693 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278748 - http://seclists.org/oss-sec/2014/q4/1066 - http://secunia.com/advisories/6
debian.org/cgi-bin/bugreport.cgi?bug=278748 - http://seclists.org/oss-sec/2014/q4/1066 - http://secunia.com/advisories/60940 - http://secunia.com/advisories/61585 - http://rhn.redhat.com/errata/RHSA-2014-1999.html
CVE ID: CVE-2004-2772 State: REJECTED Published: 2020-11-05T19:52:53 Last Updated: 2020-11-05T19:52:53 Description: No description available.
CVE ID: CVE-2004-2773 State: REJECTED Published: 2020-11-05T19:53:15 Last Updated: 2020-11-05T19:53:15 Description: No description available.
CVE ID: CVE-2004-2774 State: REJECTED Published: 2020-11-05T19:53:37 Last Updated: 2020-11-05T19:53:37 Description: No description available.
CVE ID: CVE-2004-2775 State: REJECTED Published: 2020-11-05T19:54:08 Last Updated: 2020-11-05T19:54:08 Description: No description available.
CVE ID: CVE-2004-2776 State: PUBLISHED Published: 2019-12-31T19:52:44 Last Updated: 2024-08-08T01:36:25.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: go.cgi in GoScript 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) query string or (2) artarchive parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikaku/Monitorix/issues/30 - http://openwall.com/lists/oss-security/2013/12/12/8 - http://marc.info/?l=bugtraq&m=109164242705572&w=2
CVE ID: CVE-2004-2777 State: PUBLISHED Published: 2015-08-04T10:00:00 Last Updated: 2024-08-08T01:36:25.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Healthcare Centricity Image Vault 3.x has a password of (1) gemnet for the administrator account, (2) webadmin for the webadmin administrator account of the ASACA DVD library, (3) an empty value for the gemsservice account of the Ultrasound Database, and possibly (4) gemnet2002 for the gemnet2002 account of the GEMNet license server, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value. Additi
ether this password is default, hardcoded, or dependent on another system or product that requires a fixed value. Additional Analyst Notes: - CVE Program Container: References: - http://apps.gehealthcare.com/servlet/ClientServlet/2010564-002E.pdf?REQ=RAA&DIRECTION=2010564-002&FILENAME=2010564-002E.pdf&FILEREV=E&DOCREV_ORG=E - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CVE ID: CVE-2004-2778 State: PUBLISHED Published: 2017-06-27T20:00:00 Last Updated: 2024-08-08T01:36:25.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read or write to restricted directories or execute restricted commands via navigating to the affected directories, or executing the affected commands. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.gentoo.org/show_bug.cgi?id=141619 - http://www.openwall.com/lists/oss-security/2017/01/28/7 - https://bugs.gentoo.org/show_bug.cgi?id=58611 - https://bugs.gentoo.org/show
nwall.com/lists/oss-security/2017/01/28/7 - https://bugs.gentoo.org/show_bug.cgi?id=58611 - https://bugs.gentoo.org/show_bug.cgi?id=607426 - https://bugs.gentoo.org/show_bug.cgi?id=396153 - https://bugs.gentoo.org/show_bug.cgi?id=607430
CVE ID: CVE-2004-2779 State: PUBLISHED Published: 2018-02-20T21:00:00Z Last Updated: 2024-09-17T01:15:33.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=162647 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=304913 - https://sources.debian.org/patches/libid3tag/0.15.1b-13/10_utf16.dpatch/
CVE ID: CVE-2004-9998 State: REJECTED Published: 2005-02-12T05:00:00 Last Updated: 2005-10-14T09:00:00 Description: No description available.
CVE ID: CVE-2004-9999 State: REJECTED Published: 2005-02-12T05:00:00 Last Updated: 2012-10-16T09:00:00 Description: No description available.
CVE ID: CVE-2005-0001 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T20:57:40.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the page fault handler (fault.c) for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to 2.6.10, when running on multiprocessor machines, allows local users to execute arbitrary code via concurrent threads that share the same virtual memory space and simultaneously request stack expansion. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://secunia.com/advisories/13822 - http://www.debian.org/security/2006/dsa-1082 - http://www.mandriva.com/security
- http://secunia.com/advisories/13822 - http://www.debian.org/security/2006/dsa-1082 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 - http://www.redhat.com/support/errata/RHSA-2005-017.html - https://bugzilla.fedora.us/show_bug.cgi?id=2336 - http://marc.info/?l=bugtraq&m=110554694522719&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10322 - http://www.debian.org/security/2006/dsa-1070 - http://www.redhat.com/support/errata/RHSA-2005-016.html - http://www.redhat.com/support/errata/RHSA-2005-043.html - http://www.trustix.org/errata/2005/0001/ - http://www.redhat.com/support/errata/RHSA-2005-092.html - https://exchange.xforce.ibm
ww.trustix.org/errata/2005/0001/ - http://www.redhat.com/support/errata/RHSA-2005-092.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18849 - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930 - http://marc.info/?l=bugtraq&m=110581146702951&w=2 - http://isec.pl/vulnerabilities/isec-0022-pagefault.txt - http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030826.html - http://secunia.com/advisories/20202 - http://www.securityfocus.com/bid/12244 - http://secunia.com/advisories/20338 - http://securitytracker.com/id?1012862
CVE ID: CVE-2005-0002 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T20:57:40.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13865 - http://security.gentoo.org/glsa/glsa-200501-22.xml - http://securitytracker.com/id?1012840
CVE ID: CVE-2005-0003 State: PUBLISHED Published: 2005-01-20T05:00:00 Last Updated: 2024-08-07T20:57:40.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://www.debian.org/security/2006/dsa-1082 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 - http://www.novell.com/l
n.org/security/2006/dsa-1082 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 - http://www.novell.com/linux/security/advisories/2005_18_kernel.html - http://www.redhat.com/support/errata/RHSA-2005-017.html - http://linux.bkbits.net:8080/linux-2.4/cset%4041c36fb6q1Z68WUzKQFjJR-40Ev3tw - http://www.debian.org/security/2006/dsa-1070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18886 - http://www.redhat.com/support/errata/RHSA-2005-043.html - http://www.trustix.org/errata/2005/0001/ - http://www.securityfocus.com/bid/12261 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9512 - http://www.debian.org/security/2006/dsa-1067 - http:
g/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9512 - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - http://securitytracker.com/id?1012885 - http://linux.bkbits.net:8080/linux-2.6/cset%4041a6721cce-LoPqkzKXudYby_3TUmg - http://secunia.com/advisories/20202 - http://secunia.com/advisories/20338