deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2004-1370
Published: 2004-08-04
Description: Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2) WK_ACL.GET_ACL, (3) WK_ACL.STORE_ACL, (4) WK_ADM.COMPLETE_ACL_SNAPSHOT, (5) WK_ACL.DELETE_ACLS_WITH_STATEMENT, or (6) DRILOAD.VALIDATE_STMT.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9607&w=2; http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1; http://www.kb.cert.org/vuls/id/316206
CVE: CVE-2004-1371
Published: 2004-08-04
Description: Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.
CVSS Score: 9.0 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3035&w=2; http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1; http://www.kb.cert.org/vuls/id/316206
CVE: CVE-2004-1679
Published: 2004-08-04
Description: Directory traversal vulnerability in TwinFTP 1.0.3 R2 allows remote attackers to create arbitrary files via a .../ (triple dot) in the (1) CWD, (2) STOR, or (3) RETR commands.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1121&w=2; http://secunia.com/advisories/12511/; http://www.security.org.sg/vuln/twinftp103r2.html
CVE: CVE-2004-1709
Published: 2004-08-04
Description: Datakey Rainbow iKey2032 USB token, when using the CIP client package, does not encrypt communications between the token and the driver, which could allow local users to obtain the PINs of other users.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3467&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/16887; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3467&w=2
CVE: CVE-2004-0641
Published: 2004-08-05
Description: Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/12238/; http://www.auscert.org.au/render.html?it=4299; http://www.idefense.com/application/poi/display?id=120&type=vulnerabilities&flashstatus=true
CVE: CVE-2003-1047
Published: 2004-08-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-0540.  Reason: This candidate is a duplicate of CVE-2004-0540.  Notes: All CVE users should reference CVE-2004-0540 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2004-0125
Published: 2004-08-06
Description: The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table.
CVSS Score: 7.2 (HIGH)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:12.jailroute.asc; http://www.securityfocus.com/bid/10485; https://exchange.xforce.ibmcloud.com/vulnerabilities/16342
CVE: CVE-2004-0135
Published: 2004-08-06
Description: The syssgi SGI_IOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain privileges by reading and writing to kernel memory.
CVSS Score: 7.2 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20040601-01-P.asc; http://secunia.com/advisories/11872; http://www.osvdb.org/7122
CVE: CVE-2004-0136
Published: 2004-08-06
Description: The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system crash) via a "corrupted binary."
CVSS Score: 2.1 (LOW)
References: ftp://patches.sgi.com/support/free/security/advisories/20040601-01-P.asc; http://secunia.com/advisories/11872; http://www.osvdb.org/7123
CVE: CVE-2004-0137
Published: 2004-08-06
Description: Unknown vulnerability in init for IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system panic) as a result of "page invalidation issues."
CVSS Score: 2.1 (LOW)
References: ftp://patches.sgi.com/support/free/security/advisories/20040601-01-P.asc; http://secunia.com/advisories/11872; http://www.osvdb.org/7124
CVE: CVE-2004-0201
Published: 2004-08-06
Description: Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023919.html; http://www.kb.cert.org/vuls/id/920060; http://www.us-cert.gov/cas/techalerts/TA04-196A.html
CVE: CVE-2004-0202
Published: 2004-08-06
Description: IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/11802; http://www.osvdb.org/6742; http://www.securityfocus.com/bid/10487
CVE: CVE-2004-0204
Published: 2004-08-06
Description: Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via ".." sequences in the dynamicimag argument to crystalimagehandler.aspx.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1017&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7360&w=2; http://secunia.com/advisories/11800
CVE: CVE-2004-0205
Published: 2004-08-06
Description: Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the redirect function.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/12061; http://www.ciac.org/ciac/bulletins/o-179.shtml; http://www.kb.cert.org/vuls/id/717748
CVE: CVE-2004-0210
Published: 2004-08-06
Description: The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: http://www.kb.cert.org/vuls/id/647436; http://www.us-cert.gov/cas/techalerts/TA04-196A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-020
CVE: CVE-2004-0212
Published: 2004-08-06
Description: Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an anonymous share.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9250&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5596&w=2; http://secunia.com/advisories/12060
CVE: CVE-2004-0213
Published: 2004-08-06
Description: Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that sends a Windows message to cause Utility Manager to launch winhlp32 by directly accessing the context sensitive help and bypassing the GUI, then sending another message to winhlp32 in order to open a user-selected file, a different vulnerability than CVE-2003-0908.
CVSS Score: 7.8 (HIGH)
CWE: CWE-306
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3405&w=2; http://www.kb.cert.org/vuls/id/868580; http://www.us-cert.gov/cas/techalerts/TA04-196A.html
CVE: CVE-2004-0215
Published: 2004-08-06
Description: Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header.
CVSS Score: 5.0 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/869640; http://www.us-cert.gov/cas/techalerts/TA04-196A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-018
CVE: CVE-2004-0413
Published: 2004-08-06
Description: libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL strings, which allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via an integer overflow that leads to a heap-based buffer overflow.
CVSS Score: 10.0 (HIGH)
References: http://subversion.tigris.org/security/CAN-2004-0413-advisory.txt; http://www.gentoo.org/security/en/glsa/glsa-200406-07.xml; http://www.novell.com/linux/security/advisories/2004_18_subversion.html
CVE: CVE-2004-0414
Published: 2004-08-06
Description: CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution.
CVSS Score: 10.0 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc; ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc; http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html
CVE: CVE-2004-0416
Published: 2004-08-06
Description: Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc; ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc; http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html
CVE: CVE-2004-0417
Published: 2004-08-06
Description: Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc; http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3643&w=2
CVE: CVE-2004-0418
Published: 2004-08-06
Description: serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data.
CVSS Score: 10.0 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc; ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc; http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html
CVE: CVE-2004-0447
Published: 2004-08-06
Description: Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact.  NOTE: due to a typo, this issue was accidentally assigned CVE-2004-0477.  This is the proper candidate to use for the Linux local DoS.
CVSS Score: 7.2 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc; http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html; http://secunia.com/advisories/20162
CVE: CVE-2004-0450
Published: 2004-08-06
Description: Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by log2mail.
CVSS Score: 10.0 (HIGH)
References: http://felinemenace.org/~jaguar/advisories/log2mail.txt; http://osvdb.org/6711; http://secunia.com/advisories/11768
CVE: CVE-2004-0453
Published: 2004-08-06
Description: Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service (emulator crash) and possibly execute arbitrary code via format string specifiers in an output string.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0487&w=2; http://www.securityfocus.com/bid/10543; https://exchange.xforce.ibmcloud.com/vulnerabilities/16404
CVE: CVE-2004-0460
Published: 2004-08-06
Description: Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3342&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2356&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6063&w=2
CVE: CVE-2004-0461
Published: 2004-08-06
Description: The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3342&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2356&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6063&w=2
CVE: CVE-2004-0492
Published: 2004-08-06
Description: Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.
CVSS Score: 10.0 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0140&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8250&w=2
CVE: CVE-2004-0493
Published: 2004-08-06
Description: The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.
CVSS Score: 6.4 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/023133.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0184&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4477&w=2
CVE: CVE-2004-0495
Published: 2004-08-06
Description: Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool.
CVSS Score: 7.2 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846; http://lwn.net/Articles/91155/
CVE: CVE-2004-0522
Published: 2004-08-06
Description: Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/11752; http://security.gentoo.org/glsa/glsa-200406-10.xml; http://www.debian.org/security/2004/dsa-512
CVE: CVE-2004-0524
Published: 2004-08-06
Description: Buffer overflow in the chpasswd command in the Change_passwd plugin before 4.0, as used in SquirrelMail, allows local users to gain root privileges via a long user name.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7958&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2370&w=2; http://secunia.com/advisories/11415
CVE: CVE-2004-0525
Published: 2004-08-06
Description: HP Integrated Lights-Out (iLO) 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service (hang) by accessing iLO using the TCP/IP reserved port zero.
CVSS Score: 5.0 (MEDIUM)
References: http://seclists.org/lists/bugtraq/2004/May/0281.html; http://www.securityfocus.com/bid/10415; https://exchange.xforce.ibmcloud.com/vulnerabilities/16251
CVE: CVE-2004-0526
Published: 2004-08-06
Description: Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2004-05/0161.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0713&w=2; http://www.kurczaba.com/securityadvisories/0405132poc.htm
CVE: CVE-2004-0527
Published: 2004-08-06
Description: KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.
CVSS Score: 5.0 (MEDIUM)
References: http://www.osvdb.org/6579; http://www.securityfocus.com/bid/10383; https://exchange.xforce.ibmcloud.com/vulnerabilities/16102
CVE: CVE-2004-0528
Published: 2004-08-06
Description: Netscape Navigator 7.1 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.
CVSS Score: 5.0 (MEDIUM)
References: http://www.osvdb.org/6580; http://www.securityfocus.com/bid/10389; https://exchange.xforce.ibmcloud.com/vulnerabilities/16102
CVE: CVE-2004-0529
Published: 2004-08-06
Description: The modified suexec program in cPanel, when configured for mod_php and compiled for Apache 1.3.31 and earlier without mod_phpsuexec, allows local users to execute untrusted shared scripts and gain privileges, as demonstrated using untainted scripts such as (1) proftpdvhosts or (2) addalink.cgi, a different vulnerability than CVE-2004-0490.
CVSS Score: 7.2 (HIGH)
References: http://bugzilla.cpanel.net/show_bug.cgi?id=668; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8211&w=2; http://secunia.com/advisories/11798
CVE: CVE-2004-0530
Published: 2004-08-06
Description: The PHP package in Slackware 8.1, 9.0, and 9.1, when linked against a static library, includes /tmp in the search path, which allows local users to execute arbitrary code as the PHP user by inserting shared libraries into the appropriate path.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/11760; http://www.securityfocus.com/bid/10461; http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.419765
CVE: CVE-2004-0535
Published: 2004-08-06
Description: The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory.  NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources.
CVSS Score: 2.1 (LOW)
References: ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc; http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=125168; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845
CVE: CVE-2004-0536
Published: 2004-08-06
Description: Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7249&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9228&w=2; http://security.gentoo.org/glsa/glsa-200406-02.xml
CVE: CVE-2004-0537
Published: 2004-08-06
Description: Opera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" (favicon) that is wider than expected, which could allow the web sites to spoof a trusted domain and facilitate phishing attacks using a wide icon and extra spaces.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022263.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7738&w=2; http://osvdb.org/6590
CVE: CVE-2004-0538
Published: 2004-08-06
Description: LaunchServices in Mac OS X 10.3.4 and 10.2.8 automatically registers and executes new applications, which could allow attackers to execute arbitrary code without warning the user.
CVSS Score: 7.5 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=25785; http://docs.info.apple.com/article.html?artnum=25785
CVE: CVE-2004-0539
Published: 2004-08-06
Description: The "Show in Finder" button in the Safari web browser in Mac OS X 10.3.4 and 10.2.8 may execute downloaded applications, which could allow remote attackers to execute arbitrary code.
CVSS Score: 10.0 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=25785; http://www.kb.cert.org/vuls/id/773190; http://docs.info.apple.com/article.html?artnum=25785
CVE: CVE-2004-0540
Published: 2004-08-06
Description: Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is exactly 8 characters long, does not prevent users with expired passwords from logging on to the domain.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/11746/; http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B830847; http://secunia.com/advisories/11746/
CVE: CVE-2004-0541
Published: 2004-08-06
Description: Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable).
CVSS Score: 10.0 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc; http://fedoranews.org/updates/FEDORA--.shtml; http://www.gentoo.org/security/en/glsa/glsa-200406-13.xml
CVE: CVE-2004-0542
Published: 2004-08-06
Description: PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arbitrary code, overwrite files, and access internal environment variables via (1) the "%", "|", or ">" characters to the escapeshellcmd function, or (2) the "%" character to the escapeshellarg function.
CVSS Score: 10.0 (HIGH)
References: http://www.idefense.com/application/poi/display?id=108; http://www.php.net/release_4_3_7.php; https://exchange.xforce.ibmcloud.com/vulnerabilities/16331
CVE: CVE-2004-0543
Published: 2004-08-06
Description: Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0032.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2229&w=2; http://otn.oracle.com/deploy/security/pdf/2004alert67.pdf
CVE: CVE-2004-0544
Published: 2004-08-06
Description: Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/11158/; http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0544.2; http://www-1.ibm.com/support/docview.wss?uid=isg1IY55681
CVE: CVE-2004-0545
Published: 2004-08-06
Description: LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack.
CVSS Score: 7.2 (HIGH)
References: http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0544.2; http://www.ciac.org/ciac/bulletins/o-131.shtml; http://www.securityfocus.com/bid/10230