Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
m/vulnerabilities/19393 - http://marc.info/?l=bugtraq&m=110910838600145&w=2 - http://secunia.com/advisories/14006/ - http://www.kb.cert.org/vuls/id/552561
CVE ID: CVE-2004-0467 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-08T00:17:14.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service (routing disabled) via a large number of MPLS packets, which are not filtered or verified before being sent to the Routing Engine, which reduces the speed at which other packets are processed. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/JSHA-68ZJCQ - http://securitytracker.com/id?1013039 - http://www.securityfocus.com/bid/12379 - http://www.kb.cert.org/vuls/id/409555 - http://secunia.com/
er.com/id?1013039 - http://www.securityfocus.com/bid/12379 - http://www.kb.cert.org/vuls/id/409555 - http://secunia.com/advisories/14049 - http://www.redhat.com/support/errata/RHSA-2005-081.html - http://www.niscc.gov.uk/niscc/docs/al-20050126-00067.html?lang=en - https://exchange.xforce.ibmcloud.com/vulnerabilities/19094
CVE ID: CVE-2004-0468 State: PUBLISHED Published: 2004-07-08T04:00:00 Last Updated: 2024-08-08T00:17:14.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Juniper JUNOS Packet Forwarding Engine (PFE) allows remote attackers to cause a denial of service (memory exhaustion and device reboot) via certain IPv6 packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.jpcert.or.jp/at/2004/at040009.txt - http://www.kb.cert.org/vuls/id/658859 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16548 - http://www.kb.cert.org/vuls/id/JSHA-6253CC
CVE ID: CVE-2004-0469 State: PUBLISHED Published: 2004-05-14T04:00:00 Last Updated: 2024-08-08T00:17:14.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16060 - http://www.checkpoint.com/techsupport/alerts/ike_vpn.html - http://www.securityfocus.com/bid/10273
CVE ID: CVE-2004-0470 State: PUBLISHED Published: 2004-05-20T04:00:00 Last Updated: 2024-08-08T00:17:14.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2, when editing weblogic.xml using WebLogic Builder or the SecurityRoleAssignmentMBean.toXML method, inadvertently removes security-role-assignment tags when weblogic.xml does not have a principal-name tag, which can remove intended access restrictions for the associated web application. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11593 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16123 - http
r: References: - http://secunia.com/advisories/11593 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16123 - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_59.00.jsp - http://securitytracker.com/id?1010128 - http://www.osvdb.org/6076 - http://www.kb.cert.org/vuls/id/950070 - http://www.securityfocus.com/bid/10328
CVE ID: CVE-2004-0471 State: PUBLISHED Published: 2004-05-20T04:00:00 Last Updated: 2024-08-08T00:17:15.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce site restrictions for starting and stopping servers for users in the Admin and Operator security roles, which allows unauthorized users to cause a denial of service (service shutdown). Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1010129 - http://www.securityfocus.com/bid/10327 - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_60.00.jsp - http://www.osvdb.org/6077
/bid/10327 - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_60.00.jsp - http://www.osvdb.org/6077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16121 - http://secunia.com/advisories/11594
CVE ID: CVE-2004-0472 State: REJECTED Published: 2004-05-20T04:00:00 Last Updated: 2005-02-06T10:00:00 Description: No description available.
CVE ID: CVE-2004-0473 State: PUBLISHED Published: 2004-05-20T04:00:00 Last Updated: 2024-08-08T00:17:15.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters that begin a hostname in a telnet URI, which allows remote attackers to insert options to the resulting command line and overwrite arbitrary files via (1) the "-f" option on Windows XP or (2) the "-n" option on Linux. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/linux/changelogs/750/index.dml - https://exchange.xforce.ibmcloud.com/vulnerabilities/16139 - http://www.idefense.com/application/poi/
gs/750/index.dml - https://exchange.xforce.ibmcloud.com/vulnerabilities/16139 - http://www.idefense.com/application/poi/display?id=104&type=vulnerabilities - http://securitytracker.com/id?1010142 - http://security.gentoo.org/glsa/glsa-200405-19.xml - http://www.securityfocus.com/bid/10341
CVE ID: CVE-2004-0474 State: PUBLISHED Published: 2004-05-20T04:00:00 Last Updated: 2024-08-08T00:17:15.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9621 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15101 - http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0688.html - http://www.sec
oud.com/vulnerabilities/15101 - http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0688.html - http://www.securityfocus.com/archive/1/353248 - http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0450.html - http://marc.info/?l=bugtraq&m=107652584102003&w=2 - http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0440.html
CVE ID: CVE-2004-0475 State: PUBLISHED Published: 2004-05-20T04:00:00 Last Updated: 2024-08-08T00:17:15.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double backward slash ("\\") before the target CHM file, as demonstrated using an "ms-its" URL to ntshared.chm. NOTE: this bug may overlap CVE-2003-1041. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10348 - http://www.securityfocus.com/archive/1/363202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16147
CVE ID: CVE-2004-0476 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T00:17:15.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in 3Com OfficeConnect Remote 812 ADSL Router 1.1.9.4 allows remote attackers to cause a denial of service (reboot or packet loss) via a long string containing Telnet escape characters to the Telnet port. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16257 - http://www.idefense.com/application/poi/display?id=105&type=vulnerabilities - http://secunia.com/advisories/11716 - http://www.securityfocus.com/bid/10419
CVE ID: CVE-2004-0477 State: PUBLISHED Published: 2004-07-08T04:00:00 Last Updated: 2024-08-08T00:17:15.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in 3Com OfficeConnect Remote 812 ADSL Router allows remote attackers to bypass authentication via repeated attempts using any username and password. NOTE: this identifier was inadvertently re-used for another issue due to a typo; that issue was assigned CVE-2004-0447. This candidate is ONLY for the ADSL router bypass. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=106&type=vulnerabilities&flashstatus=false - https://exchange.xforce.ibmcl
//www.idefense.com/application/poi/display?id=106&type=vulnerabilities&flashstatus=false - https://exchange.xforce.ibmcloud.com/vulnerabilities/16267 - http://www.securityfocus.com/bid/10426 - http://secunia.com/advisories/11716
CVE ID: CVE-2004-0478 State: PUBLISHED Published: 2004-05-20T04:00:00 Last Updated: 2024-08-08T00:17:15.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javascript with an infinite loop that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded ctrl-U. Additional Analyst Notes: - CVE Program Container: References: - http://lists.immunitysec.com/pipermail/dailydave/2004-May/000587.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16225 - http://bugzilla.mozilla.org/show_bug.cgi?id=243540
CVE ID: CVE-2004-0479 State: PUBLISHED Published: 2004-05-20T04:00:00 Last Updated: 2024-08-08T00:17:15.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables the imagetoolbar functionality with a META tag, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021500.html - http://marc.info/?l=vuln-dev&m=108476938219070&w=2 - http://marc.info/?l=vuln-dev&m=108457938412310&w=2
CVE ID: CVE-2004-0480 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:17:15.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?rs=475/context=SSKTWP&uid=swg21169510 - http://www.securityfocus.com/bid/10600 - http://marc.info/?l=bugtraq&m=108843896506099&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1
m/bid/10600 - http://marc.info/?l=bugtraq&m=108843896506099&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16496 - http://www.idefense.com/application/poi/display?id=111&type=vulnerabilities
CVE ID: CVE-2004-0481 State: PUBLISHED Published: 2005-02-24T05:00:00Z Last Updated: 2024-09-17T03:59:33.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: The logging feature in kcms_configure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local users to corrupt arbitrary files via a symlink attack on the KCS_ClogFile file. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=206&type=vulnerabilities - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57706-1
CVE ID: CVE-2004-0482 State: PUBLISHED Published: 2004-05-20T04:00:00 Last Updated: 2024-08-08T00:17:15.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in (1) procfs_cmdline.c, (2) procfs_fpregs.c, (3) procfs_linux.c, (4) procfs_regs.c, (5) procfs_status.c, and (6) procfs_subr.c in procfs for OpenBSD 3.5 and earlier allow local users to read sensitive kernel memory and possibly perform other unauthorized activities. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16226 - http://marc.info/?l=full-disclosure&m=108481812926420&w=2 - http://www.openbsd.org/errata35.html - http://www.o
/16226 - http://marc.info/?l=full-disclosure&m=108481812926420&w=2 - http://www.openbsd.org/errata35.html - http://www.openbsd.org/errata34.html - ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/006_procfs.patch - http://www.deprotect.com/advisories/DEPROTECT-20041305.txt - http://www.osvdb.org/6114 - http://secunia.com/advisories/11605 - http://marc.info/?l=openbsd-security-announce&m=108445767103004&w=2 - ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/020_procfs.patch
CVE ID: CVE-2004-0483 State: PUBLISHED Published: 2004-05-20T04:00:00 Last Updated: 2024-08-08T00:17:15.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service (infinite loop) via certain RPC requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16175 - http://securitytracker.com/id?1010185 - http://www.osvdb.org/6201 - http://secunia.com/advisories/11628 - ftp://patches.sgi.com/support/free/security/advisories/20040503-01-P
CVE ID: CVE-2004-0484 State: PUBLISHED Published: 2004-05-20T04:00:00 Last Updated: 2024-08-08T00:17:15.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a table containing a form that crosses multiple td elements, and whose "float: left" class is defined in a link to a CSS stylesheet after the end of the table, which may trigger a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108490218632590&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16189 - http://www.securityfocus.com/bid/10382
CVE ID: CVE-2004-0485 State: PUBLISHED Published: 2004-05-28T04:00:00 Last Updated: 2024-08-08T00:17:15.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a disk image file (.dmg) to be mounted as a disk volume. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11622/ - http://www.kb.cert.org/vuls/id/210606 - http://lists.apple.com/mhonarc/security-announce/msg00053.html - http://lists.seifried.org/pipermail/security/2004-May/003743.html - http://fundisom.com/owned/warning - https://exchange.xforce.ib
ts.seifried.org/pipermail/security/2004-May/003743.html - http://fundisom.com/owned/warning - https://exchange.xforce.ibmcloud.com/vulnerabilities/16166
CVE ID: CVE-2004-0486 State: PUBLISHED Published: 2004-05-28T04:00:00 Last Updated: 2024-08-08T00:17:15.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a help: URI handler. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/578798 - http://secunia.com/advisories/11622/ - http://lists.apple.com/mhonarc/security-announce/msg00053.html - http://www.securityfocus.com
ia.com/advisories/11622/ - http://lists.apple.com/mhonarc/security-announce/msg00053.html - http://www.securityfocus.com/bid/10356 - http://www.osvdb.org/6184 - http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0837.html - http://www.fundisom.com/owned/warning - https://exchange.xforce.ibmcloud.com/vulnerabilities/16166 - http://securitytracker.com/id?1010167
CVE ID: CVE-2004-0487 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T00:17:15.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service (resource consumption) and possibly execute arbitrary programs. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108515369718455&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16220 - http://www.ciac.org/ciac/bulletins/o-149.shtml - http://www.kb.cert.org/vuls/id/312510 - http://www.symantec.com/avcenter/security/Content/2004.05.20.html - http://www.lac.co.jp
ww.kb.cert.org/vuls/id/312510 - http://www.symantec.com/avcenter/security/Content/2004.05.20.html - http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/72_e.html - http://secunia.com/advisories/11676 - http://www.securityfocus.com/bid/10392 - http://www.osvdb.org/6303
CVE ID: CVE-2004-0488 State: PUBLISHED Published: 2004-05-28T04:00:00 Last Updated: 2024-08-08T00:17:15.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.net/errata/2004/0031/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11458 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:054 - http:/
efinition/oval%3Aorg.mitre.oval%3Adef%3A11458 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:054 - http://www.redhat.com/support/errata/RHSA-2004-342.html - http://rhn.redhat.com/errata/RHSA-2004-245.html - http://security.gentoo.org/glsa/glsa-200406-05.xml - http://marc.info/?l=bugtraq&m=108567431823750&w=2 - http://www.redhat.com/support/errata/RHSA-2004-405.html - http://marc.info/?l=bugtraq&m=109215056218824&w=2 - ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc - http://www.redhat.com/support/errata/RHSA-2005-816.html - http://marc.info/?l=bugtraq&m=109181600614477&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021610.html - http
c.info/?l=bugtraq&m=109181600614477&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021610.html - http://www.securityfocus.com/bid/10355 - http://www.debian.org/security/2004/dsa-532 - https://bugzilla.fedora.us/show_bug.cgi?id=1888 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:055 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16214 - http://marc.info/?l=bugtraq&m=108619129727620&w=2 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apac
g/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3
cvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ec
8d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2004-0489 State: PUBLISHED Published: 2004-05-28T04:00:00 Last Updated: 2024-08-08T00:17:15.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers to (1) execute arbitrary code via the ProxyCommand option or (2) conduct port forwarding via the -R option. Additional Analyst Notes: - CVE Program Container: References: - http://www.insecure.ws/article.php?story=200405222251133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16242 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021871.html
CVE ID: CVE-2004-0490 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T00:17:14.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel, when compiling Apache 1.3.29 and PHP with the mod_phpsuexec option, does not set the --enable-discard-path option, which causes php to use the SCRIPT_FILENAME variable to find and execute a script instead of the PATH_TRANSLATED variable, which allows local users to execute arbitrary PHP code as other users via a URL that references the attacker's script after the user's script, which executes the attacker's script with the user's privileges, a different vulnerability than CVE-2004-0529. Additional Analyst Notes: - CVE
cker's script with the user's privileges, a different vulnerability than CVE-2004-0529. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10407 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16239 - http://bugzilla.cpanel.net/show_bug.cgi?id=664 - http://bugzilla.cpanel.net/show_bug.cgi?id=283 - http://www.securityfocus.com/archive/1/364112 - http://www.securiteam.com/tools/5TP0N15CUA.html - http://www.a-squad.com/audit/explain10.html
CVE ID: CVE-2004-0491 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-08T00:17:15.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10672 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1117 - http://secunia.com/advisories/19
//oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1117 - http://secunia.com/advisories/19607 - http://www.redhat.com/support/errata/RHSA-2005-472.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=126411 - http://marc.info/?l=linux-kernel&m=108087017610947&w=2 - ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U - http://www.securityfocus.com/bid/13769