Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-0894 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:31:47.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly validate connection information, which allows local users to gain privileges via a specially-designed program. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4368 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2062 - https://oval.cisecurity.org/repository/search/defini
g/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2062 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3312 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18340 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A778 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-044 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3325 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1888
CVE ID: CVE-2004-0897 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:31:48.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13802 - http://www.ciac.org/ciac/bulletins/p-095.shtml - http://www.securityfocus.com/bid/12228 - http://www.kb.cert.org/vuls/id/657118 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-003 - https://oval.ci
org/vuls/id/657118 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-003 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2447 - http://securitytracker.com/id?1012833 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2128
CVE ID: CVE-2004-0899 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:31:47.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service (application crash) via a malformed DHCP message, aka "Logging Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18341 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4282 -
om/vulnerabilities/18341 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4282 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2280 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-042
CVE ID: CVE-2004-0900 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:31:47.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3577 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4846 - https://
al%3Adef%3A3577 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4846 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-042 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18342
CVE ID: CVE-2004-0901 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:31:47.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different vulnerability than CVE-2004-0571. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4076 - https://oval.cisecurity.org/repository/
cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4076 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4576 - http://www.ciac.org/ciac/bulletins/p-055.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3882 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1241 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A539 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1655 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-041 - http://www.idefen
val%3Adef%3A1655 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-041 - http://www.idefense.com/application/poi/display?id=162&type=vulnerabilities&flashstatus=true - https://exchange.xforce.ibmcloud.com/vulnerabilities/18338 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4749 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3310
CVE ID: CVE-2004-0902 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:48.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11201 - htt
tainer: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11201 - http://www.novell.com/linux/security/advisories/2004_36_mozilla.html - http://marc.info/?l=bugtraq&m=109900315219363&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17379 - http://bugzilla.mozilla.org/show_bug.cgi?id=256316 - http://bugzilla.mozilla.org/show_bug.cgi?id=245066 - http://bugzilla.mozilla.org/show_bug.cgi?id=226669 - http://bugzilla.mozilla.org/show_bug.cgi?id=258005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17378 - http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 - http://security.gentoo.org/glsa/glsa-200409
/www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 - http://security.gentoo.org/glsa/glsa-200409-26.xml - http://www.us-cert.gov/cas/techalerts/TA04-261A.html - http://marc.info/?l=bugtraq&m=109698896104418&w=2
CVE ID: CVE-2004-0903 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:47.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2004_36_mozilla.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17380 - http://marc.info/?l=bugtra
dvisories/2004_36_mozilla.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17380 - http://marc.info/?l=bugtraq&m=109900315219363&w=2 - http://www.kb.cert.org/vuls/id/414240 - http://bugzilla.mozilla.org/show_bug.cgi?id=257314 - http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 - http://security.gentoo.org/glsa/glsa-200409-26.xml - http://www.securityfocus.com/bid/11174 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10873 - http://www.us-cert.gov/cas/techalerts/TA04-261A.html - http://marc.info/?l=bugtraq&m=109698896104418&w=2
CVE ID: CVE-2004-0904 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:47.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17381 - http://www.novell.com/linux/security/advisories/2004_36_mozilla.html - http://marc.info/?l=bugtraq&m=109900315219363&w=2 - http://bugzilla.mozilla.org/
urity/advisories/2004_36_mozilla.html - http://marc.info/?l=bugtraq&m=109900315219363&w=2 - http://bugzilla.mozilla.org/show_bug.cgi?id=255067 - http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 - http://security.gentoo.org/glsa/glsa-200409-26.xml - http://www.securityfocus.com/bid/11171 - http://www.us-cert.gov/cas/techalerts/TA04-261A.html - http://marc.info/?l=bugtraq&m=109698896104418&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10952 - http://www.kb.cert.org/vuls/id/847200
CVE ID: CVE-2004-0905 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:47.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in another domain. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/651928 - http://www.novell.com/linux/security/advisories/2004_36_mozilla.html - http://bugzilla.mozilla.org/show_bug.cgi?id=250862 - http://marc.info/?l=bu
x/security/advisories/2004_36_mozilla.html - http://bugzilla.mozilla.org/show_bug.cgi?id=250862 - http://marc.info/?l=bugtraq&m=109900315219363&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10378 - http://www.securityfocus.com/bid/11177 - http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 - http://security.gentoo.org/glsa/glsa-200409-26.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17374 - http://www.us-cert.gov/cas/techalerts/TA04-261A.html - http://marc.info/?l=bugtraq&m=109698896104418&w=2
CVE ID: CVE-2004-0906 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:48.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-323.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17375 - http://www.securityfocus.com/bid/11192 - http://www.novell.com/linu
exchange.xforce.ibmcloud.com/vulnerabilities/17375 - http://www.securityfocus.com/bid/11192 - http://www.novell.com/linux/security/advisories/2004_36_mozilla.html - http://bugzilla.mozilla.org/show_bug.cgi?id=231083 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11668 - http://www.kb.cert.org/vuls/id/653160 - http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 - http://security.gentoo.org/glsa/glsa-200409-26.xml - http://secunia.com/advisories/12526/ - http://bugzilla.mozilla.org/show_bug.cgi?id=235781
CVE ID: CVE-2004-0907 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:47.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8, create certain files with insecure permissions, which could allow local users to overwrite those files and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17373 - http://bugzilla.mozilla.org/show_bug.cgi?id=254303 - http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 - http:/
a.org/show_bug.cgi?id=254303 - http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 - http://security.gentoo.org/glsa/glsa-200409-26.xml
CVE ID: CVE-2004-0908 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:48.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11179 - http://www.kb.cert.org/vuls/id/460528 - http://www.novell.com/linux/security/advisories/2004_36_mozilla.html - http://marc.info/?l=bugtraq&m=109900315219363&w=2 - http://bugzi
ll.com/linux/security/advisories/2004_36_mozilla.html - http://marc.info/?l=bugtraq&m=109900315219363&w=2 - http://bugzilla.mozilla.org/show_bug.cgi?id=257523 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9745 - http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 - http://security.gentoo.org/glsa/glsa-200409-26.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17376 - http://marc.info/?l=bugtraq&m=109698896104418&w=2 - http://secunia.com/advisories/12526
CVE ID: CVE-2004-0909 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:48.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users into performing unexpected actions, including installing software, via signed scripts that request enhanced abilities using the enablePrivilege parameter, then modify the meaning of certain security-relevant dialog messages. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.mozilla.org/show_bug.cgi?id=253942 - http://www.novell.com/linux/security/advisories/2004_3
eferences: - http://bugzilla.mozilla.org/show_bug.cgi?id=253942 - http://www.novell.com/linux/security/advisories/2004_36_mozilla.html - http://www.kb.cert.org/vuls/id/113192 - http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 - http://security.gentoo.org/glsa/glsa-200409-26.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17377 - http://marc.info/?l=bugtraq&m=109698896104418&w=2 - http://secunia.com/advisories/12526
CVE ID: CVE-2004-0910 State: REJECTED Published: 2004-09-28T04:00:00 Last Updated: 2005-02-06T10:00:00 Description: No description available.
CVE ID: CVE-2004-0911 State: PUBLISHED Published: 2004-09-28T04:00:00 Last Updated: 2024-08-08T00:31:47.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a denial of service (free of an invalid pointer), a different vulnerability than CVE-2001-0554. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/375743 - http://www.debian.org/security/2004/dsa-556 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17540 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=273694
CVE ID: CVE-2004-0913 State: PUBLISHED Published: 2005-03-09T05:00:00 Last Updated: 2024-08-08T00:31:48.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in ecartis 0.x before 0.129a+1.0.0-snap20020514-1.3 and 1.x before 1.0.0+cvs.20030911-8 allows attackers in the same domain to gain administrator privileges and modify configuration. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17809 - http://www.securityfocus.com/bid/11487 - http://www.debian.org/security/2004/dsa-572 - http://www.auscert.org.au/render.html?it=4491 - http://secunia.com/advisories/12918/
CVE ID: CVE-2004-0914 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:31:48.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, p
rtain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18146 - http://www.ubuntu.com/usn/usn-83-1 - http://rhn.redhat.com/errata/RHSA-2004-537.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18142 - http://secunia.com/advisories/13224/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9943 - http://www.linuxsecurity.com/content/view/106877/102/ - http://www.x.org/pub/X11R6.8.1/
%3Aorg.mitre.oval%3Adef%3A9943 - http://www.linuxsecurity.com/content/view/106877/102/ - http://www.x.org/pub/X11R6.8.1/patches/README.xorg-681-CAN-2004-0914.patch - http://www.redhat.com/support/errata/RHSA-2004-610.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18144 - http://www.gentoo.org/security/en/glsa/glsa-200502-07.xml - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html - http://www.debian.org/security/2004/dsa-607 - http://www.securityfocus.com/bid/11694 - http://www.gentoo.org/security/en/glsa/glsa-200502-06.xml - http://www.ubuntu.com/usn/usn-83-2 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTU01228 - http://www.mandriv
//www.ubuntu.com/usn/usn-83-2 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTU01228 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:137 - http://www.gentoo.org/security/en/glsa/glsa-200411-28.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/18147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18145
CVE ID: CVE-2004-0915 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:31:48.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hide_cvsroot and forbidden settings, which could allow remote attackers to gain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18369
CVE ID: CVE-2004-0916 State: PUBLISHED Published: 2004-11-19T05:00:00 Last Updated: 2024-08-08T00:31:47.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containing .. (dot dot) sequences in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.kyz.uklinux.net/cabextract.php#changes - http://secunia.com/advisories/12882/ - http://www.debian.org/security/2004/dsa-574 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17766 - http://www.securityfocus.com/bid/11460
CVE ID: CVE-2004-0917 State: PUBLISHED Published: 2004-11-19T05:00:00 Last Updated: 2024-08-08T00:31:48.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to /diag. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17530 - http://www.securityfocus.com/bid/11267 - http://securitytracker.com/id?1011447 - http://www.atstake.com/research/advisories
p://www.securityfocus.com/bid/11267 - http://securitytracker.com/id?1011447 - http://www.atstake.com/research/advisories/2004/a092804-1.txt
CVE ID: CVE-2004-0918 State: PUBLISHED Published: 2004-10-21T04:00:00 Last Updated: 2024-08-08T00:31:48.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923 - http://www.securityfocus.com/bid/11385 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.16/SCOSA-2005.16.txt - http://www.redhat.co
urityfocus.com/bid/11385 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.16/SCOSA-2005.16.txt - http://www.redhat.com/support/errata/RHSA-2004-591.html - http://www.idefense.com/application/poi/display?id=152&type=vulnerabilities&flashstatus=false - http://www.squid-cache.org/Advisories/SQUID-2004_3.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10931 - http://www.vupen.com/english/advisories/2008/1969/references - http://secunia.com/advisories/30967 - http://fedoranews.org/updates/FEDORA--.shtml - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg
opensuse-security-announce/2008-07/msg00001.html - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00122.html - http://marc.info/?l=bugtraq&m=109913064629327&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17688 - http://secunia.com/advisories/30914 - http://www.squid-cache.org/Advisories/SQUID-2008_1.txt - http://www.gentoo.org/security/en/glsa/glsa-200410-15.xml