Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-0837 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:31:47.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs. Additional Analyst Notes: - CVE Program Container: References: - http://lists.mysql.com/internals/16174 - http://www.redhat.com/support/errata/RHSA-2004-611.html - http://secunia.com/advisories/12783/ - http://www.debian.org/security/2004/dsa-562 - http://marc.info/?l=bugtraq&m=110140517515735&w=2 - http://lists.mysql.com/internals/16173 - https://exch
2004/dsa-562 - http://marc.info/?l=bugtraq&m=110140517515735&w=2 - http://lists.mysql.com/internals/16173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17667 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1 - http://www.securityfocus.com/bid/11357 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892 - http://www.redhat.com/support/errata/RHSA-2004-597.html - http://www.ciac.org/ciac/bulletins/p-018.shtml - http://lists.mysql.com/internals/16168 - http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml - http://www.trustix.org/errata/2004/0054/ - http://bugs.mysql.com/2408 - http://securitytracker.com/id?1011606 - http://mysql.bkbits.net:8080/mysql-
ta/2004/0054/ - http://bugs.mysql.com/2408 - http://securitytracker.com/id?1011606 - http://mysql.bkbits.net:8080/mysql-3.23/diffs/myisammrg/myrg_open.c%401.15
CVE ID: CVE-2004-0838 State: PUBLISHED Published: 2005-02-25T05:00:00 Last Updated: 2024-08-08T00:31:47.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR encryption, which allows local users to read the password directly from the device and access the password protected part of the drive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11162 - http://secunia.com/advisories/12522 - http://www.atstake.com/research/advisories/2004/a091304-1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/17342
CVE ID: CVE-2004-0839 State: PUBLISHED Published: 2004-09-14T04:00:00 Last Updated: 2024-08-08T00:31:47.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html". Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7721 - http://www.securityfocus.com/bid/1097
l.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7721 - http://www.securityfocus.com/bid/10973 - http://marc.info/?l=bugtraq&m=109336221826652&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6272 - http://seclists.org/lists/fulldisclosure/2004/Aug/0868.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2073 - http://marc.info/?l=bugtraq&m=109303291513335&w=2 - http://www.us-cert.gov/cas/techalerts/TA04-293A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade
.gov/cas/techalerts/TA04-293A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4152 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3773 - http://www.kb.cert.org/vuls/id/526089 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17044 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1563
CVE ID: CVE-2004-0840 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:31:47.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2300 - https://oval.
eferences: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2300 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5509 - http://www.securityfocus.com/bid/11374 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17621 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3460 - http://www.kb.cert.org/vuls/id/394792
CVE ID: CVE-2004-0841 State: PUBLISHED Published: 2004-09-14T04:00:00 Last Updated: 2024-08-08T00:31:47.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/413886 - http://securitytracker.com/id?1010679 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2611 - https://docs.microsoft.com/en-us/sec
al.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2611 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8077 - http://secunia.com/advisories/12048 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16675 - http://www.us-cert.gov/cas/techalerts/TA04-293A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4363 - http://www.securityfocus.com/bid/10690 - http://www.osvdb.org/7774 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5620 - https://oval.cisecurity.org
ttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5620 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6031 - http://www.securityfocus.com/archive/1/368652 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6048 - http://www.securityfocus.com/archive/1/368666 - http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0498.html
CVE ID: CVE-2004-0842 State: PUBLISHED Published: 2004-09-14T04:00:00 Last Updated: 2024-08-08T00:31:47.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as demonstrated using the "<STYLE>@;/*" string, possibly due to a missing comment terminator that may cause an invalid length to trigger a large memory copy operation, aka the "CSS Heap Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Conta
memory copy operation, aka the "CSS Heap Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=109102919426844&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4169 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 - http://www.securiteam.com/exploits/5NP042KF5A.html - http://www.kb.cert.org/vuls/id/291304 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2906 - http://marc.info/?l=full-disclosure&m=109060455614702&w=2 - http://www.ecqurity.com/adv/IEstyle.html - https://oval.cisecurity.org/repo
o/?l=full-disclosure&m=109060455614702&w=2 - http://www.ecqurity.com/adv/IEstyle.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16675 - http://www.us-cert.gov/cas/techalerts/TA04-293A.html - http://marc.info/?l=bugtraq&m=109107496214572&w=2 - http://secunia.com/advisories/12806 - http://www.ciac.org/ciac/bulletins/p-006.shtml - http://www.securityfocus.com/bid/10816 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6579 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3372
CVE ID: CVE-2004-0843 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:31:47.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the "Plug-in Navigation Address Bar Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/625616 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade
es/securitybulletins/2004/ms04-038 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7095 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7194 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2487 - http://www.us-cert.gov/cas/techalerts/TA04-293A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17651 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2537 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17655 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3949 - https://oval.cis
s/17655 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3949 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6313
CVE ID: CVE-2004-0844 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:31:47.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6 on Double Byte Character Set (DBCS) systems allows remote attackers to alter displayed address bars and spoof web pages via a URL containing special characters, facilitating phishing attacks, aka the "Address Bar Spoofing on Double Byte Character Set Systems Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17652 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2448 - https://oval.cise
/17652 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2448 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8127 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 - http://www.us-cert.gov/cas/techalerts/TA04-293A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17651 - http://marc.info/?l=ntbugtraq&m=110174346717733&w=2 - http://marc.info/?l=bugtraq&m=110178042025729&w=2 - http://www.kb.cert.org/vuls/id/431576
CVE ID: CVE-2004-0845 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:31:47.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2219 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5150
g.mitre.oval%3Adef%3A2219 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17654 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5740 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5520 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3872 - http://marc.info/?l=bugtraq&m=109770364504803&w=2 - http://www.us-cert.gov/cas/techalerts/TA04-293A.html - https://exchange.xforce.ibmcloud.com/vulnera
09770364504803&w=2 - http://www.us-cert.gov/cas/techalerts/TA04-293A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17651 - http://www.kb.cert.org/vuls/id/795720 - http://www.acrossecurity.com/aspr/ASPR-2004-10-13-1-PUB.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7611
CVE ID: CVE-2004-0846 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T00:31:47.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly validated. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-033 - http://www.ciac.org/ciac/bulletins/p-009.shtml - http://secunia.com/advisories/12800/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/17683 - https://oval.cise
- http://secunia.com/advisories/12800/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/17683 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2673 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17653 - http://marc.info/?l=bugtraq&m=109779810827096&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4226 - http://www.kb.cert.org/vuls/id/274496
CVE ID: CVE-2004-0847 State: PUBLISHED Published: 2004-10-06T04:00:00 Last Updated: 2024-08-08T00:31:47.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing a (1) "\" (backslash) or (2) "%5C" (encoded backslash), aka "Path Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-004 - http://sourceforge.net/mailarchive/forum.php?thread_id=5671607&forum_id=24754 - https://oval.cisecurity.org/rep
05-004 - http://sourceforge.net/mailarchive/forum.php?thread_id=5671607&forum_id=24754 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4987 - http://www.us-cert.gov/cas/techalerts/TA05-039A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17644 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3556 - http://www.kb.cert.org/vuls/id/283646 - http://www.securityfocus.com/bid/11342 - http://archives.neohapsis.com/archives/ntbugtraq/2004-q3/0221.html
CVE ID: CVE-2004-0848 State: PUBLISHED Published: 2005-02-08T05:00:00 Last Updated: 2024-08-08T00:31:47.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/416001 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-005 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2738 - https:
ins/2005/ms05-005 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2738 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2348 - http://www.us-cert.gov/cas/techalerts/TA05-039A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19107
CVE ID: CVE-2004-0849 State: PUBLISHED Published: 2004-09-17T04:00:00 Last Updated: 2024-08-08T00:31:47.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service (daemon crash) via certain SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - http://lists.gnu.org/archive/html/info-gnu-radius/2004-09/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17391 - http://www.idefense.com/application/poi/display?id=141&type=vulnerab
xchange.xforce.ibmcloud.com/vulnerabilities/17391 - http://www.idefense.com/application/poi/display?id=141&type=vulnerabilities
CVE ID: CVE-2004-0850 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:47.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Star before 1.5_alpha46 does not drop the effective user ID (euid) before calling external programs, which could allow local users to gain privileges by modifying the RSH environment variable to reference a malicious program. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1011195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17297 - http://www.kb.cert.org/vuls/id/339089 - http://www.gentoo.org/security/en/glsa/glsa-200409-11.xml - http://www.securityfocus.com/bid/11141
CVE ID: CVE-2004-0851 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:31:47.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) write_list and (2) dump_curr_list functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17283 - http://secunia.com/advisories/12476 - http://www.debian.org/security/2004/dsa-559 - http://marc.info/?l=bugtraq&m=109466910232385&w=2 - http://www.securityfocus.com/bid/11125 - http://exorsus.net/projects/net-acct/net-acct-notempfiles.patch
CVE ID: CVE-2004-0852 State: PUBLISHED Published: 2004-12-31T05:00:00 Last Updated: 2024-08-08T00:31:47.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in htget 0.93 allows remote attackers to execute arbitrary code via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13579 - http://www.debian.org/security/2004/dsa-611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18603
CVE ID: CVE-2004-0853 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0854 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0855 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0856 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0857 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0858 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0859 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0860 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0861 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0866 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:31:47.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109536612321898&w=2 - http://securitytracker.com/id?1011332 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17415 - http://www.securityfocus.com/bid/11186
CVE ID: CVE-2004-0867 State: PUBLISHED Published: 2004-09-24T04:00:00 Last Updated: 2024-08-08T00:31:47.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session. NOTE: it was later reported that 2.x is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109536612321898&w=2 - http://secunia.com/advisories/12580/ - http://securitytracker.com/id?1011331 - https://exchange.xforce.ibmcloud.com/vulne
ttp://secunia.com/advisories/12580/ - http://securitytracker.com/id?1011331 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17415 - https://bugzilla.mozilla.org/show_bug.cgi?id=252342 - http://kuza55.blogspot.com/2008/02/understanding-cookie-security.html - http://www.securityfocus.com/bid/11186
CVE ID: CVE-2004-0868 State: REJECTED Published: 2004-09-24T04:00:00 Last Updated: 2005-02-15T10:00:00 Description: No description available.
CVE ID: CVE-2004-0869 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:31:47.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection." Additional Analyst Notes: - CVE Program Container: References: - http://securityfocus.com/archive/1/375407 - http://securitytracker.com/id?1011332 - http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt - https://exchange.xforce.ib
tp://securitytracker.com/id?1011332 - http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/17417