Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
change.xforce.ibmcloud.com/vulnerabilities/16278 - http://www.osvdb.org/6521 - http://secunia.com/advisories/11747 - http://www.securityfocus.com/bid/10434 - http://securitytracker.com/id?1010342 - http://archives.neohapsis.com/archives/bugtraq/2004-05/0298.html - http://www.osvdb.org/6522 - http://www.osvdb.org/6523 - http://www.enderunix.org/spamguard/spamguard-1.7/CHANGELOG
CVE ID: CVE-2004-2430 State: PUBLISHED Published: 2005-08-18T04:00:00 Last Updated: 2024-08-08T01:29:12.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a virus detection pop-up window, which allows local users to gain SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/6840 - http://www.securityfocus.com/bid/10503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16375 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0117.html - http://secunia.com/advisories/11806 - http://uk.trendmicro-europe.co
.neohapsis.com/archives/bugtraq/2004-06/0117.html - http://secunia.com/advisories/11806 - http://uk.trendmicro-europe.com/enterprise/support/knowledge_base_detail.php?solutionId=20118
CVE ID: CVE-2004-2431 State: PUBLISHED Published: 2005-08-18T04:00:00 Last Updated: 2024-08-08T01:29:13.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in The Ignition Project ignitionServer 0.1.2 through 0.3.1, with the linking service enabled, allows remote attackers to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10525 - http://secunia.com/advisories/11824 - http://sourceforge.net/forum/forum.php?forum_id=381807 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16397 - http://www.osvdb.org/6844
CVE ID: CVE-2004-2432 State: PUBLISHED Published: 2005-08-18T04:00:00 Last Updated: 2024-08-08T01:29:12.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: WinAgents TFTP Server 3.0 allows remote attackers to cause a denial of service (crash) via a request for a file with a long file name, possibly due to an off-by-one buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1010464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16390 - http://www.packetstormsecurity.org/0406-exploits/WinAgentsTFTP.txt - http://www.securityfocus.com/bid/10526 - http://www.osvdb.org/6848 - http://secunia.com/advisories/11840
CVE ID: CVE-2004-2433 State: PUBLISHED Published: 2005-08-18T04:00:00 Last Updated: 2024-08-08T01:29:12.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IsValidFile function in the ADM ActiveX control for Altnet Download Manager 4.0.0.4 and earlier, as used in Kazaa Media Desktop 1.3 through 2.6.4 and Grokkster 1.3 through 2.6, allows remote attackers to execute arbitrary code via a long bstrFilepath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12446 - http://secunia.com/advisories/12456 - http://www.securityfocus.com/bid/11101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17221 - http
ories/12456 - http://www.securityfocus.com/bid/11101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17221 - http://www.osvdb.org/9549 - http://securitytracker.com/id?1011155
CVE ID: CVE-2004-2434 State: PUBLISHED Published: 2005-08-18T04:00:00 Last Updated: 2024-08-08T01:29:12.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link with "::{" (colon colon left brace), which triggers a null dereference when the user attempts to save the link using "Save As" and Internet Explorer prepares an error message with an attacker-controlled format string. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/8335 - http://securitytracker.com/id?1010491 - http://archives.neohapsis.com/archives/fulldisclosure/2004-06/042
vdb.org/8335 - http://securitytracker.com/id?1010491 - http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0428.html - http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1126.html - http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0397.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16420 - http://www.securiteam.com/windowsntfocus/5IP020KDPU.html
CVE ID: CVE-2004-2435 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:12.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System (HRMS) 7.0, when "web enabled" using HTML Access, allows remote attackers to inject arbitrary web script or HTML via unspecified (1) debugging or (2) utility scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.auscert.org.au/render.html?it=4419 - http://www.securitytracker.com/alerts/2004/Sep/1011433.html - http://www.securityfocus.com/bid/11275 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17543 -
Sep/1011433.html - http://www.securityfocus.com/bid/11275 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17543 - http://secunia.com/advisories/12674/
CVE ID: CVE-2004-2436 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/displayvuln.php?osvdb_id=10408 - http://secunia.com/advisories/12639/ - http://securitytracker.com/id?1011468 - http://www.securityfocus.com/bid/11277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17562
CVE ID: CVE-2004-2437 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstart parameter to (1) index.php or (2) members.php, or (3) the comment_id parameter to comments.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/10437 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17546 - http://www.securityfocus.com/bid/11296 - http://www.osvdb.org/10438 - http://secunia.com/advisories/12686/
CVE ID: CVE-2004-2438 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or HTML via the (1) Submit News, (2) Submit Link or (3) Submit Article field. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/10439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17548 - http://www.securityfocus.com/bid/11296 - http://secunia.com/advisories/12686/
CVE ID: CVE-2004-2439 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:12.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17634 - http://securitytracker.com/id?1011671 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBPI01085 - http://www.securityfocus.com/bid/11297
CVE ID: CVE-2004-2440 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (username or password) of other users. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1011486 - http://www.securityfocus.com/bid/11299 - http://sourceforge.net/project/shownotes.php?release_id=271699 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17566 - http://secunia.com/advisories/12685/
CVE ID: CVE-2004-2441 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors, related to a "potential security issue." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12702/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/17601 - http://www.kerio.com/kms_history.html - http://www.securityfocus.com/bid/11300
CVE ID: CVE-2004-2442 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-Virus for Linux Servers and Gateways 4.61 and earlier, and other products, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on the target system. Additional Analyst Notes: - CVE Program Container: References: - http
essed file from being opened on the target system. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13263/ - http://www.ciac.org/ciac/bulletins/p-041.shtml - http://www.kb.cert.org/vuls/id/968818 - http://www.f-secure.com/security/fsc-2004-3.shtml - http://www.securityfocus.com/bid/11732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18217
CVE ID: CVE-2004-2443 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared against the logged session variable by the logged_on function in application.php. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0226.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16622 - http://securitytracker.com/id?1010651 - http://www.securityfocus.com/bid/1
e.xforce.ibmcloud.com/vulnerabilities/16622 - http://securitytracker.com/id?1010651 - http://www.securityfocus.com/bid/10670 - http://www.osvdb.org/7724
CVE ID: CVE-2004-2444 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Jaws 0.3 allows remote attackers to inject arbitrary web script or HTML via the action parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16621 - http://securitytracker.com/id?1010651 - http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0226.html - http://www.osvdb.org/7723 - http://www.securityfocus.com/bid/10670
CVE ID: CVE-2004-2445 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:12.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a .. (dot dot) in the gadget parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/7722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16620 - http://securitytracker.com/id?1010651 - http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0226.html - http://www.securityfocus.com/bid/10670
CVE ID: CVE-2004-2446 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read arbitrary files via a ".." (dot dot) sequences in unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15812 - http://securitytracker.com/alerts/2004/Apr/1009705.html - http://secunia.com/advisories/11330 - http://members.lycos.co.uk/r34ct/main/1st%20Class%20mail%20server%204.01.txt - http://www.osvdb.org/5011 - http://www.securityfocus.com/bid/10089
CVE ID: CVE-2004-2447 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web script or HTML via the Mailbox parameter to (1) viewmail.tagz, (2) the index script under /user/, (3) members.tagz, (4) general.tagz, (5) advanced.tagz, or (6) list.tagz. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/alerts/2004/Apr/1009705.html - http://www.osvdb.org/5017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15815 - http://www.osvdb.org/5014 - ht
http://www.osvdb.org/5017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15815 - http://www.osvdb.org/5014 - http://www.osvdb.org/5013 - http://www.osvdb.org/5015 - http://secunia.com/advisories/11330 - http://www.osvdb.org/5016 - http://www.securityfocus.com/bid/10089 - http://www.osvdb.org/5012
CVE ID: CVE-2004-2448 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: S-Mart Shopping Cart or RediCart 3.9.5b stores smart.cfg under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the database name. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18219 - http://www.osvdb.org/12117 - http://secunia.com/advisories/13301 - http://securitytracker.com/id?1012306
CVE ID: CVE-2004-2449 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier allows remote attackers to cause a denial of service (application crash) via a long, malformed UDP datagram. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2004-03/0352.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15716 - http://aluigi.altervista.org/adv/wilco-again-adv.txt - http://www.osvdb.org/4833 - http://www.securityfocus.com/bid/10022 - http://secunia.com/advisorie
/wilco-again-adv.txt - http://www.osvdb.org/4833 - http://www.securityfocus.com/bid/10022 - http://secunia.com/advisories/11270
CVE ID: CVE-2004-2450 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client and server for Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier report sensitive information such as IDs and source IP addresses, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2004-03/0352.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15816 - http://secunia.com/advisories/11270 - http://www.securityfocus.com/bid/10024
CVE ID: CVE-2004-2451 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roger Wilco 1.4.1.6 and earlier, or Roger Wilco Base Station 0.30a or earlier, allows remote attackers to send audio to arbitrary channels, aka the "Voices from the deep" bug. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15819 - http://archives.neohapsis.com/archives/bugtraq/2004-03/0352.html - http://www.securityfocus.com/bid/10025 - http://secunia.com/advisories/11270
CVE ID: CVE-2004-2452 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Hitachi Cosminexus Portal Framework 01-00, 01-01, 01-02, 02-01, 02-02, 02-03, and other versions allows remote attackers to obtain sensitive information in the <ut:cache> tag library. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11128 - http://securitytracker.com/id?1011171 - http://www.hitachi-support.com/security_e/vuls_e/HS04-006_e/01-e.html - http://secunia.com/advisories/12463 - http://www.osvdb.org/9739 - https://exchange.xforce.ibmcloud.com/vu
_e/01-e.html - http://secunia.com/advisories/12463 - http://www.osvdb.org/9739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17278
CVE ID: CVE-2004-2453 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Tutti Nova 0.10 through 0.12 (Beta) and 0.9.4, when register_globals is enabled, has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17279 - http://secunia.com/advisories/12467 - http://www.osvdb.org/9741 - http://sourceforge.net/project/shownotes.php?release_id=265832
CVE ID: CVE-2004-2454 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: aMSN 0.90 for Microsoft Windows allows local users to obtain sensitive information such as hashed passwords from (1) hotlog.htm and (2) config.xml. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1010555 - http://www.osvdb.org/8123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16479 - http://sourceforge.net/tracker/index.php?func=detail&aid=976450&group_id=54091&atid=472655
CVE ID: CVE-2004-2455 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sweex Wireless Broadband Router/Accesspoint 802.11g (LC000060) allows remote attackers to obtain sensitive information and gain privileges by using TFTP to download the nvram file, then extracting the username, password, and other data from the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10339 - http://www.osvdb.org/6109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16140 - http://secunia.com/advisories/11603 - http://www.securitytracker.com/alerts/2004/May/1
cloud.com/vulnerabilities/16140 - http://secunia.com/advisories/11603 - http://www.securitytracker.com/alerts/2004/May/1010143.html - http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0574.html
CVE ID: CVE-2004-2456 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a userinfo action. Additional Analyst Notes: - CVE Program Container: References: - http://www.minibb.net/forums/index.php?action=vthread&forum=1&topic=1767 - http://www.securityfocus.com/bid/11688 - http://securitytracker.com/id?1012164 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18080 - http://www.minibb.net/forums/index.php?action=vthread&forum=9&topic=1854 - http
rce.ibmcloud.com/vulnerabilities/18080 - http://www.minibb.net/forums/index.php?action=vthread&forum=9&topic=1854 - http://www.osvdb.org/11711
CVE ID: CVE-2004-2457 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in 3Com OfficeConnect ADSL 11g Router allows remote attackers to cause a denial of service (crash) via a large amount of UDP traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/11839 - http://www.securityfocus.com/bid/11685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18081
CVE ID: CVE-2004-2458 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories. Additional Analyst Notes: - CVE Program Container: References: - http://openwebmail.org/openwebmail/download/cert/patches/SA-04:02/openwebmail.pl.patch - http://www.securityfocus.com/bid/10087 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15822 - http://secunia.com/advisories/11334
CVE ID: CVE-2004-2459 State: PUBLISHED Published: 2005-08-20T04:00:00Z Last Updated: 2024-09-16T20:21:56.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in gnubiff 1.2.0 and earlier allows local users to obtain passwords, related to the password table. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=94176&release_id=248016 - http://www.osvdb.org/7250
CVE ID: CVE-2004-2460 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service (application crash) via an "infinite" Unique IDentification Listing (UIDL) list. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11123 - http://gnubiff.sourceforge.net/changelog.php - http://secunia.com/advisories/12445 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17282 - http://www.osvdb.org/9731
CVE ID: CVE-2004-2461 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in pop3.c in gnubiff before 2.0.0 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11123 - http://gnubiff.sourceforge.net/changelog.php - http://secunia.com/advisories/12445 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17282 - http://www.osvdb.org/9731
CVE ID: CVE-2004-2462 State: PUBLISHED Published: 2005-08-20T04:00:00 Last Updated: 2024-08-08T01:29:13.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: cplay 1.49 on Linux allows local users to overwrite arbitrary files via a symlink attack on the cplay_control temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11924 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16482 - http://www.osvdb.org/7222 - http://securitytracker.com/alerts/2004/Jun/1010574.html - http://www.securityfocus.com/bid/10597