Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rg/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2413 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-016 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2516 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2190 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1027 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2705 - http://www.securityfocus.com/bid/10487 - http://secunia.com/advisories/11802
CVE ID: CVE-2004-0203 State: PUBLISHED Published: 2004-08-12T04:00:00 Last Updated: 2024-08-08T00:10:03.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16583 - http://www.kb.cert.org/vuls/id/948750 - https://oval.cisecurity.org/repository/search/definitio
/vulnerabilities/16583 - http://www.kb.cert.org/vuls/id/948750 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2016
CVE ID: CVE-2004-0204 State: PUBLISHED Published: 2004-06-11T04:00:00 Last Updated: 2024-08-08T00:10:03.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via ".." sequences in the dynamicimag argument to crystalimagehandler.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108360413811017&w=2 - http://
tional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108360413811017&w=2 - http://support.businessobjects.com/fix/hot/critical/bulletins/security_bulletin_june04.asp - http://secunia.com/advisories/11800 - http://marc.info/?l=bugtraq&m=108671836127360&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16044 - http://www.osvdb.org/6748 - http://www.securityfocus.com/bid/10260 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1157 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-017
CVE ID: CVE-2004-0205 State: PUBLISHED Published: 2004-07-14T04:00:00 Last Updated: 2024-08-08T00:10:03.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the redirect function. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA04-196A.html - http://www.securityfocus.com/bid/10706 - http://www.osvdb.org/7799 - http://secunia.com/advisories/12061 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ad
tes/securitybulletins/2004/ms04-021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2204 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16578 - http://www.ciac.org/ciac/bulletins/o-179.shtml - http://www.kb.cert.org/vuls/id/717748
CVE ID: CVE-2004-0206 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:10:03.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17657 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade
ibmcloud.com/vulnerabilities/17657 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2394 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4592 - http://www.securityfocus.com/bid/11372 - http://www.kb.cert.org/vuls/id/640488 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3120 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1852 - http://marc.info/?l=bugtraq&m=109786703930674&w=2 - http://secunia.com/advisories/12803/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-031 - https://exchange.xforce.ibmclou
3/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16556 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5074 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6788 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3242
CVE ID: CVE-2004-0207 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:10:03.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: "Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs using the SetWindowLong and SetWIndowLongPtr API functions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16579 - http://marc.info/?l=bugtraq&m=109777417922695&
eferences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16579 - http://marc.info/?l=bugtraq&m=109777417922695&w=2 - http://www.kb.cert.org/vuls/id/218526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17658 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032
CVE ID: CVE-2004-0208 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:10:03.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16580 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3A
e.ibmcloud.com/vulnerabilities/16580 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3953 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3161 - http://www.kb.cert.org/vuls/id/910998 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1751 - http://marc.info/?l=bugtraq&m=109772135404427&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17658 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4316 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4762 - https://docs.microsoft.com/en-us/secur
.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4762 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032
CVE ID: CVE-2004-0209 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:10:03.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an unchecked buffer." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16581 - http://www.kb.cert.org/vuls/id/806278 - http://marc.info/?l=bugtraq&m=10982
.xforce.ibmcloud.com/vulnerabilities/16581 - http://www.kb.cert.org/vuls/id/806278 - http://marc.info/?l=bugtraq&m=109829067325779&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17658 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1872 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2428 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2114 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032
CVE ID: CVE-2004-0210 State: PUBLISHED Published: 2004-07-14T04:00:00.000Z Last Updated: 2025-10-22T00:05:57.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA04-196A.html - http://www.kb.cert.org/vuls/id/647436 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2166 - https://docs.microsoft.com/en-us/security-u
curity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2166 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-020 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2847 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16590
CVE ID: CVE-2004-0211 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:10:03.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local users to cause a denial of service (system crash) via a malicious program. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/119262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16582 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17658 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032 - https://oval.cisecurity.org/
17658 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4893
CVE ID: CVE-2004-0212 State: PUBLISHED Published: 2004-07-14T04:00:00 Last Updated: 2024-08-08T00:10:03.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an anonymous share. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108981403025596&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16591 - http://www.ngssoftware.com/advisories/mstask
03025596&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16591 - http://www.ngssoftware.com/advisories/mstaskjob.txt - http://www.us-cert.gov/cas/techalerts/TA04-196A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3428 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1344 - http://marc.info/?l=bugtraq&m=108981273009250&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1964 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1781 - http://www.kb.cert.org/vuls/id/228028 - https://docs.microsoft.com/en-us/security-updat
%3Aorg.mitre.oval%3Adef%3A1781 - http://www.kb.cert.org/vuls/id/228028 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-022 - http://secunia.com/advisories/12060
CVE ID: CVE-2004-0213 State: PUBLISHED Published: 2004-07-14T04:00:00 Last Updated: 2024-08-08T00:10:03.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that sends a Windows message to cause Utility Manager to launch winhlp32 by directly accessing the context sensitive help and bypassing the GUI, then sending another message to winhlp32 in order to open a user-selected file, a different vulnerability than CVE-2003-0908. Additional Analyst Notes: - CVE Program Container: References: - https
le, a different vulnerability than CVE-2003-0908. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2495 - http://www.us-cert.gov/cas/techalerts/TA04-196A.html - http://www.kb.cert.org/vuls/id/868580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16592 - http://marc.info/?l=bugtraq&m=108975382413405&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-019
CVE ID: CVE-2004-0214 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:10:03.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B322857 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2638 - http://securi
s%3B322857 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2638 - http://securitytracker.com/id?1011647 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5307 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1601 - http://www.securityfocus.com/bid/10213 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17662 - http://www.osvdb.org/5687 - http://www.kb.cert.org/vuls/id/616200 - http://seclists.org/lists/fulldisclosure/2004/Apr/0933.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4345 - http://secunia.com/advisories/11482/ -
cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4345 - http://secunia.com/advisories/11482/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15956 - http://seclists.org/lists/bugtraq/2004/Apr/0322.html - http://www.securiteam.com/windowsntfocus/5JP0M1PCKI.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-037
CVE ID: CVE-2004-0215 State: PUBLISHED Published: 2004-07-14T04:00:00 Last Updated: 2024-08-08T00:10:03.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA04-196A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2137 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1950 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2657
rg.mitre.oval%3Adef%3A1950 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2657 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-018 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16585 - http://www.kb.cert.org/vuls/id/869640 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3376
CVE ID: CVE-2004-0216 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:10:03.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, which triggers the integer overflow when calculating a buffer length and leads to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5316 - http://www.ngssoftware.com/advisories/msinsengfull.txt
repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5316 - http://www.ngssoftware.com/advisories/msinsengfull.txt - http://www.kb.cert.org/vuls/id/637760 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17620 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7865 - http://www.us-cert.gov/cas/techalerts/TA04-293A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17651 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7717 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6
3Aorg.mitre.oval%3Adef%3A7717 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6100 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6600 - http://marc.info/?l=bugtraq&m=110616383332055&w=2 - http://marc.info/?l=bugtraq&m=109760693512754&w=2 - http://marc.info/?l=ntbugtraq&m=110619893620517&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5329
CVE ID: CVE-2004-0217 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T00:10:03.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15215 - http://marc.info/?l=bugtraq&m=107694800908164&w=2
CVE ID: CVE-2004-0218 State: PUBLISHED Published: 2004-03-25T05:00:00 Last Updated: 2024-08-08T00:10:03.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (infinite loop) via an ISAKMP packet with a zero-length payload, as demonstrated by the Striker ISAKMP Protocol Test Suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/alerts/2004/Mar/1009468.html - http://www.openbsd.org/errata.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15518 - http://www.securityfocus.com/bid/10028 - http://marc.info/?l=bugtraq&m=108008530028019&w=2 - ht
/vulnerabilities/15518 - http://www.securityfocus.com/bid/10028 - http://marc.info/?l=bugtraq&m=108008530028019&w=2 - http://secunia.com/advisories/11156 - http://www.rapid7.com/advisories/R7-0018.html - http://www.kb.cert.org/vuls/id/349113
CVE ID: CVE-2004-0219 State: PUBLISHED Published: 2004-03-25T05:00:00 Last Updated: 2024-08-08T00:10:03.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a malformed IPSEC SA payload, as demonstrated by the Striker ISAKMP Protocol Test Suite. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15628 - http://www.securitytracker.com/alerts/2004/Mar/1009468.html - http://www.securityfocus.com/bid/9907 - http://www.openbsd.org/errata.html - http://marc.info/?l=bugtraq&m=108008530028019&w=2 - http
curityfocus.com/bid/9907 - http://www.openbsd.org/errata.html - http://marc.info/?l=bugtraq&m=108008530028019&w=2 - http://www.kb.cert.org/vuls/id/785945 - http://www.rapid7.com/advisories/R7-0018.html
CVE ID: CVE-2004-0220 State: PUBLISHED Published: 2004-03-25T05:00:00 Last Updated: 2024-08-08T00:10:03.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a malformed Cert Request payload, which causes an integer underflow that is used in a malloc operation that is not properly handled, as demonstrated by the Striker ISAKMP Protocol Test Suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/alerts/2004/Mar/1009468.html - http://www.securityfocus.com/bid/9907 - http://www.openbsd.org/errata.html - http://marc.info/?l=bu
4/Mar/1009468.html - http://www.securityfocus.com/bid/9907 - http://www.openbsd.org/errata.html - http://marc.info/?l=bugtraq&m=108008530028019&w=2 - http://www.kb.cert.org/vuls/id/223273 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15629 - http://www.rapid7.com/advisories/R7-0018.html
CVE ID: CVE-2004-0221 State: PUBLISHED Published: 2004-03-25T05:00:00 Last Updated: 2024-08-08T00:10:03.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as demonstrated by the Striker ISAKMP Protocol Test Suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/alerts/2004/Mar/1009468.html - http://www.securityfocus.com/bid/9907 - http://www.openbsd.org/errata.html - http://marc.info/?l=bugtraq&m=108008530028019&w=2 -
ww.securityfocus.com/bid/9907 - http://www.openbsd.org/errata.html - http://marc.info/?l=bugtraq&m=108008530028019&w=2 - http://www.kb.cert.org/vuls/id/524497 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15630 - http://www.rapid7.com/advisories/R7-0018.html
CVE ID: CVE-2004-0222 State: PUBLISHED Published: 2004-03-25T05:00:00 Last Updated: 2024-08-08T00:10:03.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via certain ISAKMP packets, as demonstrated by the Striker ISAKMP Protocol Test Suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/alerts/2004/Mar/1009468.html - http://www.openbsd.org/errata.html - http://marc.info/?l=bugtraq&m=108008530028019&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15519 - http://www.securityfocus.com/bid/100
=108008530028019&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15519 - http://www.securityfocus.com/bid/10032 - http://www.rapid7.com/advisories/R7-0018.html - http://www.kb.cert.org/vuls/id/996177