deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2004-1307
Published: 2004-12-21
Description: Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005/May/msg00001.html; http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1; http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1
CVE: CVE-2004-1778
Published: 2004-12-22
Description: Skype 0.92.0.12 and 1.0.0.1 for Linux, and possibly other versions, creates the /usr/share/skype/lang directory with world-writable permissions, which allows local users to modify language files and possibly conduct social engineering or other attacks.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-276
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6303&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5786&w=2; http://www.securityfocus.com/bid/12081
CVE: CVE-2005-0066
Published: 2004-12-22
Description: The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router is within the range of possible values for data that has already been acknowledged (aka "TCP acknowledgement number checking"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
CVSS Score: 5.0 (MEDIUM)
References: http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html; http://www.securityfocus.com/bid/13124; http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html
CVE: CVE-2005-0067
Published: 2004-12-22
Description: The original design of TCP does not require that port numbers be assigned randomly (aka "Port randomization"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
CVSS Score: 5.0 (MEDIUM)
References: http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html; http://www.securityfocus.com/bid/13124; http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html
CVE: CVE-2005-0068
Published: 2004-12-22
Description: The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
CVSS Score: 5.0 (MEDIUM)
References: http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html; http://www.securityfocus.com/bid/13124; http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html
CVE: CVE-2005-0441
Published: 2004-12-22
Description: Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users to execute arbitrary code via the (1) attrib_valid function, (2) covert function, (3) declare statement, or (4) a crafted query plan, or remote authenticated users with database owner or "sa" role privileges to execute arbitrary code via (5) a crafted install java statement.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7194&w=2; http://secunia.com/advisories/13632
CVE: CVE-2001-1413
Published: 2004-12-23
Description: Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument.
CVSS Score: 7.5 (HIGH)
References: http://seclists.org/lists/vuln-dev/2001/Nov/0202.html; http://security.gentoo.org/glsa/glsa-200410-08.xml; http://www.kb.cert.org/vuls/id/176363
CVE: CVE-2004-0510
Published: 2004-12-23
Description: Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demonstrated via the execmail program.
CVSS Score: 7.2 (HIGH)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.7/SCOSA-2004.7.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1636&w=2; http://www.deprotect.com/advisories/DEPROTECT-20040206.txt
CVE: CVE-2004-0511
Published: 2004-12-23
Description: Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service by triggering a null dereference.
CVSS Score: 2.1 (LOW)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.7/SCOSA-2004.7.txt; http://www.securityfocus.com/bid/10758; https://exchange.xforce.ibmcloud.com/vulnerabilities/16739
CVE: CVE-2004-0512
Published: 2004-12-23
Description: Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service by triggering a core dump.
CVSS Score: 2.1 (LOW)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.7/SCOSA-2004.7.txt; http://www.securityfocus.com/bid/10758; https://exchange.xforce.ibmcloud.com/vulnerabilities/16740
CVE: CVE-2004-0563
Published: 2004-12-23
Description: The tspc.conf configuration file in freenet6 before 0.9.6 and before 1.0 on Debian Linux has world readable permissions, which could allow local users to gain sensitive information, such as a username and password.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/12705/; http://securitytracker.com/id?1011460; http://www.debian.org/security/2004/dsa-555
CVE: CVE-2004-0564
Published: 2004-12-23
Description: Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files.  NOTE: the developer has publicly disputed the claim that this is a vulnerability because pppoe "is NOT designed to run setuid-root."  Therefore this identifier applies *only* to those configurations and installations under which pppoe is run setuid root despite the developer's warnings.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0510&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9450&w=2; http://www.debian.org/security/2004/dsa-557
CVE: CVE-2004-0601
Published: 2004-12-23
Description: distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which could allow remote attackers to bypass intended restrictions.
CVSS Score: 7.5 (HIGH)
References: http://distcc.samba.org/ftp/distcc/distcc-2.17.NEWS; http://secunia.com/advisories/12711/; http://www.securityfocus.com/bid/11319
CVE: CVE-2004-0646
Published: 2004-12-23
Description: Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/12647/; http://www.kb.cert.org/vuls/id/990200; http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html
CVE: CVE-2004-0685
Published: 2004-12-23
Description: Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.
CVSS Score: 4.6 (MEDIUM)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127921; http://secunia.com/advisories/20162; http://secunia.com/advisories/20163
CVE: CVE-2004-0749
Published: 2004-12-23
Description: The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames.
CVSS Score: 5.0 (MEDIUM)
References: http://fedoranews.org/updates/FEDORA-2004-318.shtml; http://subversion.tigris.org/security/CAN-2004-0749-advisory.txt; http://www.gentoo.org/security/en/glsa/glsa-200409-35.xml
CVE: CVE-2004-0803
Published: 2004-12-23
Description: Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000888; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7450&w=2; http://scary.beasts.org/security/CESA-2004-006.txt
CVE: CVE-2004-0805
Published: 2004-12-23
Description: Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain (1) mp3 or (2) mp2 file.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026151.html; http://www.alighieri.org/advisories/advisory-mpg123.txt; http://www.debian.org/security/2004/dsa-564
CVE: CVE-2004-0810
Published: 2004-12-23
Description: Buffer overflow in Netopia Timbuktu 7.0.3 allows remote attackers to cause a denial of service (server process crash) via a certain data string that is sent to multiple simultaneous client connections to TCP port 407.
CVSS Score: 5.0 (MEDIUM)
References: http://msgs.securepoint.com/cgi-bin/get/bugtraq0411/218.html; http://secunia.com/advisories/13250/; http://www.corsaire.com/advisories/c040720-001.txt
CVE: CVE-2004-0814
Published: 2004-12-23
Description: Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or (2) remote attackers to cause a denial of service (panic) by switching from console to PPP line discipline, then quickly sending data that is received during the switch.
CVSS Score: 1.2 (LOW)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=131672; http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=133110; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0336&w=2
CVE: CVE-2004-0816
Published: 2004-12-23
Description: Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-191
References: http://secunia.com/advisories/11202/; http://www.mandriva.com/security/advisories?name=MDKSA-2005:022; http://www.novell.com/linux/security/advisories/2004_37_kernel.html
CVE: CVE-2004-0833
Published: 2004-12-23
Description: Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail configuration script with a fixed username and password, which could allow remote attackers to use Sendmail as an open mail relay and send spam messages.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/12667; http://www.debian.org/security/2004/dsa-554; http://www.securityfocus.com/bid/11262
CVE: CVE-2004-0834
Published: 2004-12-23
Description: Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2) pppoa2, or (3) pppoa3.
CVSS Score: 7.2 (HIGH)
References: http://sourceforge.net/project/showfiles.php?group_id=32758&package_id=28264&release_id=271734; http://speedtouch.sourceforge.net/index.php?/news.en.html; http://www.mail-archive.com/speedtouch%40ml.free.fr/msg06688.html
CVE: CVE-2004-0841
Published: 2004-12-23
Description: Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0498.html; http://secunia.com/advisories/12048; http://securitytracker.com/id?1010679
CVE: CVE-2004-0842
Published: 2004-12-23
Description: Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as demonstrated using the "<STYLE>@;/*" string, possibly due to a missing comment terminator that may cause an invalid length to trigger a large memory copy operation, aka the "CSS Heap Memory Corruption Vulnerability."
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4572&w=2; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]4702&w=2; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6844&w=2
CVE: CVE-2004-0849
Published: 2004-12-23
Description: Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service (daemon crash) via certain SNMP requests.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.gnu.org/archive/html/info-gnu-radius/2004-09/msg00000.html; http://www.idefense.com/application/poi/display?id=141&type=vulnerabilities; https://exchange.xforce.ibmcloud.com/vulnerabilities/17391
CVE: CVE-2004-0850
Published: 2004-12-23
Description: Star before 1.5_alpha46 does not drop the effective user ID (euid) before calling external programs, which could allow local users to gain privileges by modifying the RSH environment variable to reference a malicious program.
CVSS Score: 7.2 (HIGH)
References: http://securitytracker.com/id?1011195; http://www.gentoo.org/security/en/glsa/glsa-200409-11.xml; http://www.kb.cert.org/vuls/id/339089
CVE: CVE-2004-0867
Published: 2004-12-23
Description: Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.  NOTE: it was later reported that 2.x is also affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://kuza55.blogspot.com/2008/02/understanding-cookie-security.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1898&w=2; http://secunia.com/advisories/12580/
CVE: CVE-2004-0868
Published: 2004-12-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-0866.  Reason: This candidate is a duplicate of CVE-2004-0866.  Notes: The description for CVE-2004-0866 was inadvertently attached to this issue instead.  All CVE users should reference CVE-2004-0866 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2004-0873
Published: 2004-12-23
Description: Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that references the program.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2004/Sep/msg00001.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/17420; http://lists.apple.com/archives/security-announce/2004/Sep/msg00001.html
CVE: CVE-2004-0875
Published: 2004-12-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002 and earlier allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to the wiki module.
CVSS Score: 6.8 (MEDIUM)
References: http://downloads.phpgroupware.org/changelog; http://www.gentoo.org/security/en/glsa/glsa-200409-22.xml; https://exchange.xforce.ibmcloud.com/vulnerabilities/17289
CVE: CVE-2004-0954
Published: 2004-12-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-0597.  Reason: This candidate is a reservation duplicate of CVE-2004-0597.  Notes: All CVE users should reference CVE-2004-0597 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2004-0955
Published: 2004-12-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-0599.  Reason: This candidate is a reservation duplicate of CVE-2004-0599 (the first item listed in that candidate).  Notes: All CVE users should reference CVE-2004-0599 instead of this candidate.  All references and descriptions have been removed from this candidate to prevent accidental usage
CVE: CVE-2004-0973
Published: 2004-12-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-0457.  Reason: This candidate is a reservation duplicate of CVE-2004-0457.  Notes: All CVE users should reference CVE-2004-0457 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2004-0998
Published: 2004-12-23
Description: Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/13663; http://www.debian.org/security/2004/dsa-616; http://www.kb.cert.org/vuls/id/995038
CVE: CVE-2004-1305
Published: 2004-12-23
Description: The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1833&w=2; http://www.kb.cert.org/vuls/id/177584; http://www.kb.cert.org/vuls/id/697136
CVE: CVE-2004-1336
Published: 2004-12-23
Description: The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.
CVSS Score: 2.1 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286370; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4839&w=2; http://www.securityfocus.com/bid/12100
CVE: CVE-2004-1337
Published: 2004-12-23
Description: The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges.
CVSS Score: 7.2 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3035&w=2; http://www.securityfocus.com/bid/12093
CVE: CVE-2004-1338
Published: 2004-12-23
Description: The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to add arbitrary functions to the SDO_CMT_DBK_FN_TABLE and SDO_CMT_CBK_DML_TABLE, then performing a DELETE on the SDO_TXN_IDX_INSERTS table, which causes the SDO_CMT_CBK_TRIG trigger to execute the user-supplied functions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4420&w=2; http://www.ngssoftware.com/advisories/oracle23122004I.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/18655
CVE: CVE-2004-1339
Published: 2004-12-23
Description: SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the new.table_name or new.column_name parameters.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4420&w=2; http://www.ngssoftware.com/advisories/oracle23122004I.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/18655
CVE: CVE-2004-1361
Published: 2004-12-23
Description: Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a malformed .hlp file, which leads to a heap-based buffer overflow.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9440&w=2; http://www.securityfocus.com/bid/12091; http://www.xfocus.net/flashsky/icoExp/
CVE: CVE-2004-1373
Published: 2004-12-23
Description: Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6003&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4745&w=2; http://securitytracker.com/id?1012675
CVE: CVE-2004-1375
Published: 2004-12-23
Description: Unknown vulnerability in System Administration Manager (SAM) in HP-UX B.11.00, B.11.11, B.11.22, and B.11.23 allows local users to gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9555&w=2; http://www.ciac.org/ciac/bulletins/p-085.shtml; http://www.securityfocus.com/bid/12098
CVE: CVE-2004-2130
Published: 2004-12-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote attackers to execute arbitrary script or HTML via the (1) folder or (2) mode variables.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3822&w=2; http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=161943; http://www.securityfocus.com/bid/9290
CVE: CVE-2004-1317
Published: 2004-12-27
Description: Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4586&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3890&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2327&w=2