deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2004-0644
Published: 2004-09-28
Description: The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4753&w=2; http://rhn.redhat.com/errata/RHSA-2004-350.html
CVE: CVE-2004-0689
Published: 2004-09-28
Description: KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files.
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1170&w=2; http://secunia.com/advisories/12276/
CVE: CVE-2004-0690
Published: 2004-09-28
Description: The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP files in the /tmp directory.
CVSS Score: 4.6 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261386; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1170&w=2
CVE: CVE-2004-0691
Published: 2004-09-28
Description: Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8309&w=2; http://security.gentoo.org/glsa/glsa-200408-20.xml; http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1
CVE: CVE-2004-0692
Published: 2004-09-28
Description: The XPM parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0693.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8890&w=2; http://security.gentoo.org/glsa/glsa-200408-20.xml; http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1
CVE: CVE-2004-0693
Published: 2004-09-28
Description: The GIF parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0692.
CVSS Score: 5.0 (MEDIUM)
References: http://security.gentoo.org/glsa/glsa-200408-20.xml; http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1; http://www.debian.org/security/2004/dsa-542
CVE: CVE-2004-0699
Published: 2004-09-28
Description: Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/12177/; http://securitytracker.com/alerts/2004/Jul/1010799.html; http://www.checkpoint.com/techsupport/alerts/asn1.html
CVE: CVE-2004-0745
Published: 2004-09-28
Description: LHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell metacharacters in its name.
CVSS Score: 10.0 (HIGH)
References: http://www.gentoo.org/security/en/glsa/glsa-200409-13.xml; http://www.redhat.com/support/errata/RHSA-2004-323.html; http://www.redhat.com/support/errata/RHSA-2004-440.html
CVE: CVE-2005-0190
Published: 2004-09-29
Description: Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to delete arbitrary files via a Real Metadata Packages (RMP) file with a FILENAME tag containing .. (dot dot) sequences in a filename that ends with a ? (question mark) and an allowed file extension (e.g. .mp3), which bypasses the check for the file extension.
CVSS Score: 2.6 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2291&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8843&w=2; http://secunia.com/advisories/12672/
CVE: CVE-2004-1604
Published: 2004-09-30
Description: cPanel 9.9.1-RELEASE-3 allows remote authenticated users to chmod arbitrary files via a symlink attack on the _private directory, which is created when Front Page extensions are enabled.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0326&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0326&w=2
CVE: CVE-2004-1349
Published: 2004-10-04
Description: gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
CVSS Score: 2.1 (LOW)
CWE: CWE-269
References: http://secunia.com/advisories/12744; http://sunsolve.sun.com/search/document.do?assetkey=1-26-57600-1&searchclause=security; http://www.kb.cert.org/vuls/id/635998
CVE: CVE-2004-0928
Published: 2004-10-05
Description: The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm".
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3823&w=2; http://secunia.com/advisories/12638/; http://secunia.com/advisories/12647/
CVE: CVE-2005-0188
Published: 2004-10-06
Description: Format string vulnerability in the SetBaseURL function in AtHoc toolbar allows remote attackers to execute arbitrary code via format string specifiers in an invalid URL that is recorded in the debug log.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4742&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5176&w=2; http://www.ngssoftware.com/advisories/athoc-01full.txt
CVE: CVE-2005-0189
Published: 2004-10-06
Description: Stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to execute arbitrary code via a long ShowPreferences argument.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/ntbugtraq/2005-q1/0046.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2291&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8261&w=2
CVE: CVE-2005-0192
Published: 2004-10-06
Description: Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an RJS filename.
CVSS Score: 2.6 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2291&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8401&w=2; http://service.real.com/help/faq/security/040928_player/EN/
CVE: CVE-2005-0373
Published: 2004-10-07
Description: Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://www.gentoo.org/security/en/glsa/glsa-200410-05.xml; http://www.linuxcompatible.org/print42495.html; http://www.mandriva.com/security/advisories?name=MDKSA-2005:054
CVE: CVE-2004-1598
Published: 2004-10-12
Description: Adobe Acrobat and Acrobat Reader 6.0 allow remote attackers to read arbitrary files via a PDF file that contains an embedded Shockwave (swf) file that references files outside of the temporary directory.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6956&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2447&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0520&w=2
CVE: CVE-2004-1671
Published: 2004-10-12
Description: Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to gain sensitive information via a direct request to (1) accountsettings_add.html or (2) topmenu.html.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0067&w=2; http://secunia.com/advisories/12789; http://www.securityfocus.com/bid/11371
CVE: CVE-2004-1672
Published: 2004-10-12
Description: attachment.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to view other users' attachments by specifying the username and message ID in an HTTP request.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0067&w=2; http://secunia.com/advisories/12789; http://www.securityfocus.com/bid/11371
CVE: CVE-2004-1673
Published: 2004-10-12
Description: accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0067&w=2; http://secunia.com/advisories/12789; http://www.securityfocus.com/bid/11371
CVE: CVE-2004-1674
Published: 2004-10-12
Description: viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to (1) delete arbitrary files via the originalfolder parameter or (2) move arbitrary files via the messageid parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0067&w=2; http://secunia.com/advisories/12789; http://www.securityfocus.com/bid/11371
CVE: CVE-2004-1594
Published: 2004-10-13
Description: Cross-site scripting (XSS) vulnerability in FuseTalk 4.0 allows remote attackers to execute arbitrary web script via an img src tag.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2168&w=2; http://secunia.com/advisories/12823; http://www.securityfocus.com/bid/11393
CVE: CVE-2004-1595
Published: 2004-10-13
Description: Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2233&w=2; http://secunia.com/advisories/12822/; http://www.securityfocus.com/bid/11409
CVE: CVE-2004-1596
Published: 2004-10-13
Description: The 3COM Wireless router 3CRADSL72 running Boot Code 1.3d allows remote attackers to gain sensitive information such as passwords and router settings via a direct HTTP request to app_sta.stm.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9901&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1673&w=2; http://www.securityfocus.com/archive/1/378551
CVE: CVE-2004-1597
Published: 2004-10-13
Description: RIM Blackberry 7230 running RIM Blackberry OS 3.7 SP1 allows remote attackers to cause a denial of service (device reboot and possibly data corruption) via a calendar message with a long Location field, which triggers a watchdog while the message is being stored.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027487.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0842&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9493&w=2
CVE: CVE-2004-1605
Published: 2004-10-14
Description: SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams=ADMIN!, and usertype=Administrator.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8478&w=2; http://secunia.com/advisories/12883
CVE: CVE-2004-1700
Published: 2004-10-14
Description: Cross-site scripting (XSS) vulnerability in SettingsBase.php in Pinnacle ShowCenter 1.51 build 121 allows remote attackers to inject arbitrary HTML or web script via the Skin parameter, which is echoed in an error message.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/12613; http://www.securityfocus.com/bid/11415; https://exchange.xforce.ibmcloud.com/vulnerabilities/17708
CVE: CVE-2004-1602
Published: 2004-10-15
Description: ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid usernames by timing the server response.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-203
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6133&w=2; http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02; http://securitytracker.com/id?1011687
CVE: CVE-2004-1599
Published: 2004-10-16
Description: Cross-site scripting (XSS) vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to execute arbitrary web script or HTML via the (1) query or (2) nick parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9669&w=2; http://secunia.com/advisories/12850; http://securitytracker.com/id?1011748
CVE: CVE-2004-1600
Published: 2004-10-16
Description: index.php in CoolPHP 1.0-stable allows remote attackers to gain sensitive information via an invalid op parameter, which reveals the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9669&w=2; http://secunia.com/advisories/12850; http://securitytracker.com/id?1011748
CVE: CVE-2004-1601
Published: 2004-10-16
Description: Directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files and execute local PHP scripts via a .. (dot dot) in the op parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9669&w=2; http://secunia.com/advisories/12850; http://securitytracker.com/id?1011748
CVE: CVE-2004-1638
Published: 2004-10-16
Description: Buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long (1) EHLO and possibly (2) HELO command.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0050&w=2; http://secunia.com/advisories/12999; http://www.securityfocus.com/bid/11535
CVE: CVE-2004-1603
Published: 2004-10-18
Description: cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3753&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4208&w=2; http://secunia.com/advisories/12865
CVE: CVE-2004-1606
Published: 2004-10-18
Description: slxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash) via an invalid HTTP request, which might also leak sensitive information in the ErrorLogMsg cookie.
CVSS Score: 6.4 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8478&w=2; http://secunia.com/advisories/12883
CVE: CVE-2004-1607
Published: 2004-10-18
Description: slxweb.dll in SalesLogix 6.1 allows remote attackers to obtain sensitive information via a (1) Library or (2) Attachment request with an invalid file parameter, which reveals the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8478&w=2; http://secunia.com/advisories/12883
CVE: CVE-2004-1608
Published: 2004-10-18
Description: SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via the id parameter in a view operation.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8478&w=2; http://secunia.com/advisories/12883
CVE: CVE-2004-1609
Published: 2004-10-18
Description: SalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of an HTTP response, which could allow remote attackers to gain access.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8478&w=2; http://secunia.com/advisories/12883
CVE: CVE-2004-1610
Published: 2004-10-18
Description: SalesLogix 6.1 uses client-specified pathnames for writing certain files, which might allow remote authenticated users to create arbitrary files and execute code via the (1) vMME.AttachmentPath or (2) vMME.LibraryPath variables.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8478&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8478&w=2
CVE: CVE-2004-1611
Published: 2004-10-18
Description: SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) execute arbitrary SLX commands on the server or spoof the server via a man-in-the-middle (MITM) attack, or (2) obtain the database password via a GetConnection request to TCP port 1707.
CVSS Score: 5.1 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8478&w=2; http://secunia.com/advisories/12883
CVE: CVE-2004-1612
Published: 2004-10-18
Description: Directory traversal vulnerability in SalesLogix 6.1 allows remote attackers to upload arbitrary files via a .. (dot dot) in a ProcessQueueFile request.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8478&w=2; http://secunia.com/advisories/12883
CVE: CVE-2004-1613
Published: 2004-10-18
Description: Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG tag followed by a null character and some trailing characters, as demonstrated by mangleme.
CVSS Score: 5.0 (MEDIUM)
References: http://lcamtuf.coredump.cx/mangleme/gallery/; http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0511&w=2
CVE: CVE-2004-1614
Published: 2004-10-18
Description: Mozilla allows remote attackers to cause a denial of service (application crash from invalid memory access) via an "unusual combination of visual elements," including several large MARQUEE tags with large height parameters, as demonstrated by mangleme.
CVSS Score: 5.0 (MEDIUM)
References: http://lcamtuf.coredump.cx/mangleme/gallery/; http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0511&w=2
CVE: CVE-2004-1615
Published: 2004-10-18
Description: Opera allows remote attackers to cause a denial of service (invalid memory reference and application crash) via a web page or HTML email that contains a TBODY tag with a large COL SPAN value, as demonstrated by mangleme.
CVSS Score: 2.6 (LOW)
References: http://lcamtuf.coredump.cx/mangleme/gallery/; http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0511&w=2
CVE: CVE-2004-1616
Published: 2004-10-18
Description: Links allows remote attackers to cause a denial of service (memory consumption) via a web page or HTML email that contains a table with a td element and a large rowspan value,as demonstrated by mangleme.
CVSS Score: 5.0 (MEDIUM)
References: http://lcamtuf.coredump.cx/mangleme/gallery/; http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0511&w=2
CVE: CVE-2004-1617
Published: 2004-10-18
Description: Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of service (infinite loop) via a web page or HTML email that contains invalid HTML including (1) a TEXTAREA tag with a large COLS value and (2) a large tag name in an element that is not terminated, as demonstrated by mangleme.  NOTE: a followup suggests that the relevant trigger for this issue is the large COLS value.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lcamtuf.coredump.cx/mangleme/gallery/; http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0511&w=2
CVE: CVE-2004-1621
Published: 2004-10-18
Description: NOTE: this issue has been disputed by the vendor.  Cross-site scripting (XSS) vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of (1) computed for display, (2) computed when composed, or (3) computed text element fields.  NOTE: the vendor has disputed this issue, saying that it is not a problem with Notes/Domino itself, but with the applications that do not properly handle this feature
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3736&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9328&w=2; http://secunia.com/advisories/12891
CVE: CVE-2004-1353
Published: 2004-10-19
Description: Unknown vulnerability in LDAP on Sun Solaris 8 and 9, when using Role Based Access Control (RBAC), allows local users to execute certain commands with additional privileges.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/12873/; http://securitytracker.com/id?1011789; http://sunsolve.sun.com/search/document.do?assetkey=1-26-57657-1&searchclause=%22category:security%22%20%22availability%2C%20security%22
CVE: CVE-2004-1618
Published: 2004-10-19
Description: Vypress Tonecast 1.3 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed mp2 stream.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/toneboom-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6472&w=2; http://secunia.com/advisories/12890
CVE: CVE-2003-1014
Published: 2004-10-20
Description: Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use multiple MIME fields with the same name, which may be interpreted differently by mail clients.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8759&w=2; http://www.uniras.gov.uk/vuls/2004/380375/mime.htm; https://exchange.xforce.ibmcloud.com/vulnerabilities/17333
CVE: CVE-2003-1015
Published: 2004-10-20
Description: Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusual fashion, which may be interpreted differently by mail clients.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8936&w=2; http://www.uniras.gov.uk/vuls/2004/380375/mime.htm; https://exchange.xforce.ibmcloud.com/vulnerabilities/9273
CVE: CVE-2003-1016
Published: 2004-10-20
Description: Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in MIME headers, parameters, and values, including (1) fields that should not be quoted, (2) duplicate quotes, or (3) missing leading or trailing quote characters, which may be interpreted differently by mail clients.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7616&w=2; http://www.uniras.gov.uk/vuls/2004/380375/mime.htm; https://exchange.xforce.ibmcloud.com/vulnerabilities/17336
CVE: CVE-2004-0051
Published: 2004-10-20
Description: Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported Content-Transfer-Encoding values such as (1) uuencode, (2) mac-binhex40, and (3) yenc, which may be interpreted differently by mail clients.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0063&w=2; http://www.uniras.gov.uk/vuls/2004/380375/mime.htm; https://exchange.xforce.ibmcloud.com/vulnerabilities/17337