deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2004-0236
Published: 2004-11-23
Description: SQL injection vulnerability in login.asp in thePHOTOtool allows remote attackers to gain unauthorized access via the password field.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9530&w=2; http://securitytracker.com/alerts/2004/Feb/1008906.html; http://www.osvdb.org/6727
CVE: CVE-2004-0237
Published: 2004-11-23
Description: Directory traversal vulnerability in index.php in Aprox PHP Portal allows remote attackers to read arbitrary files via a full pathname in the show parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7321&w=2; http://securitytracker.com/id?1008915; http://www.osvdb.org/10859
CVE: CVE-2004-0238
Published: 2004-11-23
Description: Multiple buffer overflows in Overkill (0verkill) 0.15pre3 might allow local users to execute arbitrary code in the client via a long HOME environment variable in the (1) load_cfg and (2) save_cfg functions; possibly allow remote attackers to execute arbitrary code via long strings to (3) the send_message function; and, in the server, via (4) the parse_command_line function.
CVSS Score: 7.2 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016579.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4509&w=2; http://www.securiteam.com/securitynews/5AP010KC0C.html
CVE: CVE-2004-0239
Published: 2004-11-23
Description: SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unauthorized access via the photo variable.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3998&w=2; http://www.securiteam.com/securitynews/5KP010UC0W.html; http://www.securityfocus.com/bid/9557
CVE: CVE-2004-0240
Published: 2004-11-23
Description: Directory traversal vulnerability in X-Cart 3.4.3 allows remote attackers to view arbitrary files via a .. (dot dot) in the shop_closed_file argument to auth.php.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6448&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/15033; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6448&w=2
CVE: CVE-2004-0241
Published: 2004-11-23
Description: X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (2) general.php.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6448&w=2; http://www.securityfocus.com/bid/9560; https://exchange.xforce.ibmcloud.com/vulnerabilities/15034
CVE: CVE-2004-0242
Published: 2004-11-23
Description: X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with (1) phpinfo command or (2) perlinfo command.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6448&w=2; http://www.securityfocus.com/bid/9563; https://exchange.xforce.ibmcloud.com/vulnerabilities/15036
CVE: CVE-2004-0243
Published: 2004-11-23
Description: AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correct, which allows remote attackers to guess the password via brute force methods.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-203
References: http://archives.neohapsis.com/archives/bugtraq/2004-02/0313.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6044&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/15172
CVE: CVE-2004-0244
Published: 2004-11-23
Description: Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or OSM module allow local users to cause a denial of service (hang or reset) by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/10780; http://www.cisco.com/warp/public/707/cisco-sa-20040203-cat6k.shtml; http://www.kb.cert.org/vuls/id/810062
CVE: CVE-2004-0245
Published: 2004-11-23
Description: Web Crossing 4.x and 5.x allows remote attackers to cause a denial of service (crash) by sending a HTTP POST request with a large or negative Content-Length, which causes an integer divide-by-zero.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0516&w=2; http://www.securityfocus.com/bid/9576; https://exchange.xforce.ibmcloud.com/vulnerabilities/15022
CVE: CVE-2004-0246
Published: 2004-11-23
Description: Multiple PHP remote file inclusion vulnerabilities in (1) fonctions.lib.php, (2) derniers_commentaires.php, and (3) admin.php in Les Commentaires 2.0 allow remote attackers to execute arbitrary PHP code via the rep parameter.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9763&w=2; http://secunia.com/advisories/10768/; http://www.securityfocus.com/bid/9536
CVE: CVE-2004-0247
Published: 2004-11-23
Description: The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service (crash via exception) via a UDP packet with a length field that is greater than the actual data length, which causes Chaser to read unexpected memory.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0084&w=2; http://www.securityfocus.com/bid/9567; https://exchange.xforce.ibmcloud.com/vulnerabilities/15031
CVE: CVE-2004-0248
Published: 2004-11-23
Description: Cross-site scripting vulnerability (XSS) in PHPX 3.2.3 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into (1) keywords argument of main.inc.php, (2) body argument of help.inc.php, or (3) the subject field in Personal Messages and Forum.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4901&w=2; http://secunia.com/advisories/10797/; http://www.securityfocus.com/bid/9569
CVE: CVE-2004-0249
Published: 2004-11-23
Description: PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable to reference another userID.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2004-03/0154.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4901&w=2; http://secunia.com/advisories/10797/
CVE: CVE-2004-0250
Published: 2004-11-23
Description: SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the product parameter in showproduct.php or (2) the cat parameter in showcat.php.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9696&w=2; http://www.securityfocus.com/bid/9557; http://www.zone-h.org/en/advisories/read/id=3864/
CVE: CVE-2004-0251
Published: 2004-11-23
Description: Cross-site scripting (XSS) vulnerability in rxgoogle.cgi allows remote attackers to execute arbitrary script as other users via the query parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4958&w=2; http://www.securityfocus.com/bid/9575; https://exchange.xforce.ibmcloud.com/vulnerabilities/15043
CVE: CVE-2004-0252
Published: 2004-11-23
Description: TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service (CPU consumption) via an empty USER name.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6707&w=2; http://www.securityfocus.com/bid/9573; http://www.securitytracker.com/alerts/2004/Feb/1008943.html
CVE: CVE-2004-0253
Published: 2004-11-23
Description: IBM Cloudscape 5.1 running jdk 1.4.2_03 allows remote attackers to execute arbitrary programs or cause a denial of service via certain SQL code, possibly due to a SQL injection vulnerability.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9233&w=2; http://www.securityfocus.com/bid/9583; https://exchange.xforce.ibmcloud.com/vulnerabilities/15067
CVE: CVE-2004-0254
Published: 2004-11-23
Description: Cross-site scripting (XSS) vulnerability in Discuz! Board 2.x and 3.x allows remote attackers to execute arbitrary script as other users via an img tag.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7150&w=2; http://www.securityfocus.com/bid/9584; https://exchange.xforce.ibmcloud.com/vulnerabilities/15066
CVE: CVE-2004-0255
Published: 2004-11-23
Description: Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . (dot) and / (slash) characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4122&w=2; http://www.securityfocus.com/bid/9585; https://exchange.xforce.ibmcloud.com/vulnerabilities/15064
CVE: CVE-2004-0256
Published: 2004-11-23
Description: GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp.
CVSS Score: 2.1 (LOW)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000811; http://secunia.com/advisories/10777; http://www.geocrawler.com/mail/msg.php3?msg_id=3438808&list=405
CVE: CVE-2004-0257
Published: 2004-11-23
Description: OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service (crash) by sending an IPv6 packet with a small MTU to a listening port and then issuing a TCP connect to that port.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-002.txt.asc; http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016704.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6564&w=2
CVE: CVE-2004-0258
Published: 2004-11-23
Description: Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via malformed (1) .RP, (2) .RT, (3) .RAM, (4) .RPM or (5) .SMIL files.
CVSS Score: 7.6 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0027.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3559&w=2; http://www.ciac.org/ciac/bulletins/o-075.shtml
CVE: CVE-2004-0259
Published: 2004-11-23
Description: The check_referer() function in Formmail.php 5.0 and earlier allows remote attackers to bypass access restrictions via an empty or spoofed HTTP Referer, as demonstrated using an application on the same web server that contains a cross-site scripting (XSS) issue.
CVSS Score: 9.3 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9629&w=2; http://www.securityfocus.com/bid/9591; https://exchange.xforce.ibmcloud.com/vulnerabilities/15079
CVE: CVE-2004-0260
Published: 2004-11-23
Description: The AddToMailingList function in CactuSoft CactuShop 5.0 Lite contains a backdoor that allows remote attackers to delete arbitrary files via an email address that starts with |||.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016819.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5888&w=2; http://www.securityfocus.com/bid/9589
CVE: CVE-2004-0261
Published: 2004-11-23
Description: oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and access the control panel via a 0 in the uid parameter.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0713&w=2; http://www.grohol.com/downloads/oj/latest/changelog.txt; http://www.osvdb.org/3872
CVE: CVE-2004-0262
Published: 2004-11-23
Description: Stack-based buffer overflow in The Palace 3.5 and earlier client allows remote attackers to execute arbitrary code via a link to a palace:// url followed by a long server address string.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0033.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2195&w=2; http://www.elitehaven.net/thepalace.txt
CVE: CVE-2004-0263
Published: 2004-11-23
Description: PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://security.gentoo.org/glsa/glsa-200402-01.xml; http://www.osvdb.org/3878; http://www.securityfocus.com/bid/9599
CVE: CVE-2004-0264
Published: 2004-11-23
Description: palmhttpd for PalmOS allows remote attackers to cause a denial of service (crash) by establishing two simultaneous HTTP connections, which exceeds the PalmOS accept queue.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1570&w=2; http://www.securityfocus.com/bid/9608; https://exchange.xforce.ibmcloud.com/vulnerabilities/15090
CVE: CVE-2004-0265
Published: 2004-11-23
Description: Cross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows remote attackers to execute arbitrary script as other users via URL-encoded (1) title or (2) fname parameters in the News or Reviews modules.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0936&w=2; http://www.securityfocus.com/bid/9605; http://www.securityfocus.com/bid/9613
CVE: CVE-2004-0266
Published: 2004-11-23
Description: SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x to 7.1.0 allows remote attackers to obtain the administrator password via the c_mid parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7066&w=2; http://www.securityfocus.com/bid/9615; https://exchange.xforce.ibmcloud.com/vulnerabilities/15080
CVE: CVE-2004-0267
Published: 2004-11-23
Description: The (1) inoregupdate, (2) uniftest, or (3) unimove scripts in eTrust InoculateIT for Linux 6.0 allow local users to overwrite arbitrary files via a symlink attack on files in /tmp.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1518&w=2; http://secunia.com/advisories/10833; http://www.excluded.org/advisories/advisory10.txt
CVE: CVE-2004-0268
Published: 2004-11-23
Description: Multiple buffer overflows in EvolutionX 3921 and 3935 allow remote attackers to cause a denial of service (hang) via (1) a long cd command to the FTP server, or (2) a long dir command to the telnet server.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016988.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4891&w=2; http://www.securityfocus.com/bid/9631
CVE: CVE-2004-0269
Published: 2004-11-23
Description: SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7646&w=2; http://www.scan-associates.net/papers/phpnuke69.txt; http://www.securityfocus.com/bid/9630
CVE: CVE-2004-0270
Published: 2004-11-23
Description: libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid line length (e.g., a lowercase character), which causes an assert error in clamd that terminates the calling program.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3822&w=2; http://security.gentoo.org/glsa/glsa-200402-07.xml; http://www.freebsd.org/cgi/query-pr.cgi?pr=62586
CVE: CVE-2004-0271
Published: 2004-11-23
Description: Multiple cross-site scripting vulnerabilities (XSS) in MaxWebPortal allow remote attackers to execute arbitrary web script as other users via (1) the sub_name parameter of dl_showall.asp, (2) the SendTo parameter in Personal Messages, (3) the HTTP_REFERER for down.asp, or (4) the image name of an Avatar in the register form.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6515&w=2; http://www.securityfocus.com/bid/9625; https://exchange.xforce.ibmcloud.com/vulnerabilities/15120
CVE: CVE-2004-0272
Published: 2004-11-23
Description: SQL injection vulnerability in MaxWebPortal allows remote attackers to inject arbitrary SQL code and gain sensitive information via the SendTo parameter in Personal Messages.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6515&w=2; http://www.securityfocus.com/bid/9625; https://exchange.xforce.ibmcloud.com/vulnerabilities/15121
CVE: CVE-2004-0273
Published: 2004-11-23
Description: Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via an RMP file that contains .. (dot dot) sequences in a .rjs skin file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4321&w=2; http://service.real.com/help/faq/security/040123_player/EN/; http://www.kb.cert.org/vuls/id/514734
CVE: CVE-2004-0274
Published: 2004-11-23
Description: Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STAT_OFFERED status to a bot that is not a sharebot, which allows remote attackers to use STAT_OFFERED to promote a bot to a sharebot and conduct unauthorized activities.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7102&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3958&w=2; http://mogan.nonsoloirc.com/egg_advisory.txt
CVE: CVE-2004-0275
Published: 2004-11-23
Description: SQL injection vulnerability in calendar_download.php in BosDates 3.2 and earlier allows remote attackers to obtain sensitive information and gain access via the calendar parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3575&w=2; http://www.securityfocus.com/bid/9639; http://www.zone-h.org/en/advisories/read/id=3925/
CVE: CVE-2004-0276
Published: 2004-11-23
Description: The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request with a sequence of "%" characters and a missing Host field.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://aluigi.altervista.org/poc/monkeydos.zip; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6968&w=2; http://monkeyd.sourceforge.net/
CVE: CVE-2004-0277
Published: 2004-11-23
Description: Format string vulnerability in Dream FTP 1.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the username.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016871.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2882&w=2; http://www.security-protocols.com/modules.php?name=News&file=article&sid=1722
CVE: CVE-2004-0278
Published: 2004-11-23
Description: Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data than specified, which causes Ratbag to repeatedly check the socket for more data.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0530&w=2; http://www.securityfocus.com/bid/9644; https://exchange.xforce.ibmcloud.com/vulnerabilities/15188
CVE: CVE-2004-0279
Published: 2004-11-23
Description: AIM Sniff (aimSniff.pl) 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3439&w=2; http://www.securityfocus.com/bid/9653; https://exchange.xforce.ibmcloud.com/vulnerabilities/15199
CVE: CVE-2004-0280
Published: 2004-11-23
Description: Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends in a "%20" (encoded space character), e.g. index.jsp%20.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0547&w=2; http://www.securityfocus.com/bid/9614; https://exchange.xforce.ibmcloud.com/vulnerabilities/15085
CVE: CVE-2004-0281
Published: 2004-11-23
Description: Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-INF" in Windows.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0547&w=2; http://www.securityfocus.com/bid/9617; https://exchange.xforce.ibmcloud.com/vulnerabilities/15087
CVE: CVE-2004-0282
Published: 2004-11-23
Description: Crob FTP daemon 3.5.2 allows remote attackers to cause a denial of service (crash) by repeatedly connecting to and disconnecting from the server.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9374&w=2; http://secunia.com/advisories/10882; http://www.osvdb.org/6621
CVE: CVE-2004-0283
Published: 2004-11-23
Description: Mailmgr 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/mailmgr.unsort, (2) /tmp/mailmgr.tmp, or (3) /tmp/mailmgr.sort.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4517&w=2; http://www.securityfocus.com/bid/9654; https://exchange.xforce.ibmcloud.com/vulnerabilities/15203
CVE: CVE-2004-0284
Published: 2004-11-23
Description: Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CPU consumption), if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters (%00) after the host name.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2133&w=2; http://www.securityfocus.com/bid/9629; https://exchange.xforce.ibmcloud.com/vulnerabilities/15127
CVE: CVE-2004-0285
Published: 2004-11-23
Description: PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and (3) AllMyGuests allow remote attackers to execute arbitrary PHP code via a URL in the _AMVconfig[cfg_serverpath] parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-829
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4155&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4865&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8750&w=2
CVE: CVE-2004-0286
Published: 2004-11-23
Description: Buffer overflow in RobotFTP 1.0 and 2.0 beta 1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long username.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6878&w=2; http://www.securityfocus.com/bid/9672; https://exchange.xforce.ibmcloud.com/vulnerabilities/15225
CVE: CVE-2004-0287
Published: 2004-11-23
Description: Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service (crash) via a RETR command with a long argument containing a large number of / (slash) characters, possibly triggering a buffer overflow.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7263&w=2; http://www.securityfocus.com/bid/9668; https://exchange.xforce.ibmcloud.com/vulnerabilities/15220
CVE: CVE-2004-0288
Published: 2004-11-23
Description: Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexing a large document.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0726&w=2; http://www.securityfocus.com/bid/9667; https://exchange.xforce.ibmcloud.com/vulnerabilities/15209
CVE: CVE-2004-0289
Published: 2004-11-23
Description: Buffer overflow in sdbscan in SignatureDB 0.1.1 allows local users to cause a denial of service (segmentation fault) via a database file that contains a large key parameter.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2648&w=2; http://www.securityfocus.com/bid/9661; https://exchange.xforce.ibmcloud.com/vulnerabilities/15217