deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2004-0119
Published: 2004-06-01
Description: The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service (crash from null dereference) or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selection.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0081.html; http://www.ciac.org/ciac/bulletins/o-114.shtml; http://www.kb.cert.org/vuls/id/638548
CVE: CVE-2004-0120
Published: 2004-06-01
Description: The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.
CVSS Score: 5.0 (MEDIUM)
References: http://www.ciac.org/ciac/bulletins/o-114.shtml; http://www.kb.cert.org/vuls/id/150236; http://www.securityfocus.com/bid/10115
CVE: CVE-2004-0123
Published: 2004-06-01
Description: Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.ciac.org/ciac/bulletins/o-114.shtml; http://www.kb.cert.org/vuls/id/255924; http://www.securityfocus.com/bid/10118
CVE: CVE-2004-0124
Published: 2004-06-01
Description: The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/11065/; http://www.ciac.org/ciac/bulletins/o-115.shtml; http://www.kb.cert.org/vuls/id/212892
CVE: CVE-2004-0133
Published: 2004-06-01
Description: The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the XFS file system, which allows local users to obtain sensitive information by reading the raw device.
CVSS Score: 2.1 (LOW)
References: ftp://patches.sgi.com/support/free/security/advisories/20040405-01-U.asc; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8441&w=2; http://secunia.com/advisories/11362
CVE: CVE-2004-0155
Published: 2004-06-01
Description: The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1000&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4244&w=2
CVE: CVE-2004-0156
Published: 2004-06-01
Description: Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before 2.50.6 allow remote mail relays to cause a denial of service and possibly execute arbitrary code.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0855&w=2; http://secunia.com/advisories/11378; http://secunia.com/advisories/11384
CVE: CVE-2004-0157
Published: 2004-06-01
Description: x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a malicious rmail program.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/11382; http://securitytracker.com/id?1009789; http://shellcode.org/Advisories/XONIX.txt
CVE: CVE-2004-0177
Published: 2004-06-01
Description: The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846; http://linux.bkbits.net:8080/linux-2.4/cset%404056b368s6vpJbGWxDD_LhQNYQrdzQ; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8441&w=2
CVE: CVE-2004-0178
Published: 2004-06-01
Description: The OSS code for the Sound Blaster (sb16) driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not properly handle certain sample sizes, which allows local users to cause a denial of service (crash) via a sample with an odd number of bytes.
CVSS Score: 2.1 (LOW)
References: ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846; http://linux.bkbits.net:8080/linux-2.4/cset%40404ce5967rY2Ryu6Z_uNbYh643wuFA
CVE: CVE-2004-0179
Published: 2004-06-01
Description: Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-134
References: ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc; http://lists.suse.com/archive/suse-security-announce/2004-Apr/0002.html; http://lists.suse.com/archive/suse-security-announce/2004-Apr/0003.html
CVE: CVE-2004-0180
Published: 2004-06-01
Description: The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405.
CVSS Score: 2.6 (LOW)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:07.cvs.asc; ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/002_cvs.patch; ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc
CVE: CVE-2004-0181
Published: 2004-06-01
Description: The JFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the JFS file system, which allows local users to obtain sensitive information by reading the raw device.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8441&w=2; http://secunia.com/advisories/17002; http://security.gentoo.org/glsa/glsa-200407-02.xml
CVE: CVE-2004-0182
Published: 2004-06-01
Description: Mailman before 2.0.13 allows remote attackers to cause a denial of service (crash) via an email message with an empty subject field.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc; http://www.redhat.com/support/errata/RHSA-2004-156.html; ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc
CVE: CVE-2004-0197
Published: 2004-06-01
Description: Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database query.
CVSS Score: 7.5 (HIGH)
References: http://www.kb.cert.org/vuls/id/740716; http://www.securityfocus.com/bid/10112; http://www.us-cert.gov/cas/techalerts/TA04-104A.html
CVE: CVE-2004-0385
Published: 2004-06-01
Description: Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener.  NOTE: due to the vagueness of the Oracle advisory, it is not clear whether there are additional issues besides this overflow, although the advisory alludes to multiple "vulnerabilities."
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0078.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7635&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1770&w=2
CVE: CVE-2004-0387
Published: 2004-06-01
Description: Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allows remote attackers to execute arbitrary code via a malformed .R3T file.
CVSS Score: 5.1 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0077.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0135&w=2; http://secunia.com/advisories/11314
CVE: CVE-2004-0388
Published: 2004-06-01
Description: The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack.
CVSS Score: 2.1 (LOW)
References: http://dev.mysql.com/doc/mysql/en/news-4-1-2.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0402&w=2; http://secunia.com/advisories/11223/
CVE: CVE-2004-0389
Published: 2004-06-01
Description: RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GET_PARAMETER or (2) DESCRIBE requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://secunia.com/advisories/11395; http://www.idefense.com/application/poi/display?id=102&type=vulnerabilities; http://www.securityfocus.com/bid/10157
CVE: CVE-2004-0391
Published: 2004-06-01
Description: Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7 through 1.7.3 have a hardcoded username and password, which allows remote attackers to add new users, modify existing users, and change configuration.
CVSS Score: 10.0 (HIGH)
References: http://www.ciac.org/ciac/bulletins/o-111.shtml; http://www.cisco.com/warp/public/707/cisco-sa-20040407-username.shtml; http://www.kb.cert.org/vuls/id/659228
CVE: CVE-2004-0403
Published: 2004-06-01
Description: Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt; ftp://patches.sgi.com/support/free/security/advisories/20040506-01-U.asc; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4244&w=2
CVE: CVE-2004-0405
Published: 2004-06-01
Description: CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:07.cvs.asc; ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1613&w=2
CVE: CVE-2004-0407
Published: 2004-06-01
Description: The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish.
CVSS Score: 2.6 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9001&w=2; http://secunia.com/advisories/11392; http://securitytracker.com/id?1009825
CVE: CVE-2004-0409
Published: 2004-06-01
Description: Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://mail.nl.linux.org/xchat-announce/2004-04/msg00000.html; http://security.gentoo.org/glsa/glsa-200404-15.xml; http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_123013
CVE: CVE-2004-2044
Published: 2004-06-01
Description: PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke 7x do not properly use the eregi() PHP function with $_SERVER['PHP_SELF'] to identify the calling script, which allows remote attackers to directly access scripts, obtain path information via a PHP error message, and possibly gain access, as demonstrated using an HTTP request that contains the "admin.php" string.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2004-06/0005.html; http://archives.neohapsis.com/archives/bugtraq/2004-06/0006.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0559&w=2
CVE: CVE-2002-1580
Published: 2004-06-14
Description: Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.
CVSS Score: 7.5 (HIGH)
References: http://asg.web.cmu.edu/cyrus/download/imapd/changes.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000557; http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557
CVE: CVE-2003-1041
Published: 2004-06-14
Description: Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a filename that ends in "::" which is treated as a .chm file even if it does not have a .chm extension.  NOTE: this bug may overlap CVE-2004-0475.
CVSS Score: 7.5 (HIGH)
References: http://www.kb.cert.org/vuls/id/187196; http://www.securityfocus.com/archive/1/348521; http://www.securityfocus.com/bid/9320
CVE: CVE-2004-0038
Published: 2004-06-14
Description: McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81.
CVSS Score: 7.5 (HIGH)
References: http://download.nai.com/products/patches/ePO/v2.x/Patch14.txt; http://www.osvdb.org/5626; http://www.securityfocus.com/bid/10200
CVE: CVE-2004-0050
Published: 2004-06-14
Description: Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as (1) NUL, (2) CON, (3) AUX, (4) COM1, (5) COM2, and others.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0024.html; http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020952.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4888&w=2
CVE: CVE-2004-0154
Published: 2004-06-14
Description: rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
CVSS Score: 5.0 (MEDIUM)
References: http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535; http://www.redhat.com/support/errata/RHSA-2004-072.html; http://www.securityfocus.com/bid/9813
CVE: CVE-2004-0199
Published: 2004-06-14
Description: Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0820&w=2; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]1825&w=2; http://www.exploitlabs.com/files/advisories/EXPL-A-2004-001-helpctr.txt
CVE: CVE-2004-0227
Published: 2004-06-14
Description: Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to execute arbitrary code via a long query string.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/10340; http://www.zoneminder.com/index.php?id=20&type=0&backPID=20&tt_news=29; https://exchange.xforce.ibmcloud.com/vulnerabilities/16136
CVE: CVE-2004-0392
Published: 2004-06-14
Description: racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" fields.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt; http://orange.kame.net/dev/query-pr.cgi?pr=555; http://www.vuxml.org/freebsd/40fcf20f-8891-11d8-90d1-0020ed76ef5a.html
CVE: CVE-2004-0396
Published: 2004-06-14
Description: Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2004-008.txt.asc; ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:10.cvs.asc; http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0980.html
CVE: CVE-2004-1754
Published: 2004-06-15
Description: The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additional records.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.virus.org/bugtraq-0406/msg00234.html; http://secunia.com/advisories/11888; http://securityresponse.symantec.com/avcenter/security/Content/2004.06.21.html
CVE: CVE-2004-1346
Published: 2004-06-19
Description: The Sun Solaris Volume Manager (SVM) on Solaris 9 allows local users to cause a denial of service (kernel panic) via a malformed probe request to the SVM.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/12104/; http://sunsolve.sun.com/search/document.do?assetkey=1-26-57598-1&searchclause=security; http://www.auscert.org.au/render.html?it=4253
CVE: CVE-2004-1345
Published: 2004-06-21
Description: Unknown vulnerability in Sun StorEdge Enterprise Storage Manager (ESM) 2.1 for Solaris 8 and Solaris 9 allows local users with the "ESMUser" role to gain root access.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/11935/; http://sunsolve.sun.com/search/document.do?assetkey=1-26-57581-1&searchclause=security; http://www.ciac.org/ciac/bulletins/o-166.shtml
CVE: CVE-2004-0397
Published: 2004-07-07
Description: Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a (1) DAV2 REPORT query or (2) get-dated-rev svn-protocol command.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021737.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7697&w=2; http://secunia.com/advisories/11642
CVE: CVE-2004-0398
Published: 2004-07-07
Description: Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0982.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000841; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2333&w=2
CVE: CVE-2004-0399
Published: 2004-07-07
Description: Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021015.html; http://secunia.com/advisories/11558; http://www.debian.org/security/2004/dsa-501
CVE: CVE-2004-0400
Published: 2004-07-07
Description: Stack-based buffer overflow in Exim 4 before 4.33, when the headers_check_syntax option is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code during the header check.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021015.html; http://www.debian.org/security/2004/dsa-501; http://www.debian.org/security/2004/dsa-502
CVE: CVE-2004-0401
Published: 2004-07-07
Description: Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions.
CVSS Score: 10.0 (HIGH)
References: http://packages.debian.org/changelogs/pool/main/libt/libtasn1-2/libtasn1-2_0.2.13-1/changelog; http://securitytracker.com/id?1010159; http://www.backports.org/changelog.html
CVE: CVE-2004-0402
Published: 2004-07-07
Description: Buffer overflow in xpcd-svga in xpcd before 2.08, and possibly other versions, may allow local users to execute arbitrary code.
CVSS Score: 4.6 (MEDIUM)
References: http://www.debian.org/security/2004/dsa-508; http://www.mandriva.com/security/advisories?name=MDKSA-2004:053; http://www.securityfocus.com/bid/10403
CVE: CVE-2004-0404
Published: 2004-07-07
Description: logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp.
CVSS Score: 1.2 (LOW)
References: http://secunia.com/advisories/11399; http://www.debian.org/security/2004/dsa-488; http://www.mandriva.com/security/advisories?name=MDKSA-2004:155
CVE: CVE-2004-0411
Published: 2004-07-07
Description: The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which allows remote attackers to manipulate the options that are passed to the associated programs, possibly to read arbitrary files or execute arbitrary code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-88
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000843; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7344&w=2; http://secunia.com/advisories/11602
CVE: CVE-2004-0420
Published: 2004-07-07
Description: The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/10736/; http://www.kb.cert.org/vuls/id/106324; http://www.security-express.com/archives/bugtraq/2004-01/0300.html
CVE: CVE-2004-0422
Published: 2004-07-07
Description: flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack.
CVSS Score: 2.1 (LOW)
References: http://www.debian.org/security/2004/dsa-500; http://www.redhat.com/support/errata/RHSA-2004-344.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/16027
CVE: CVE-2004-0423
Published: 2004-07-07
Description: The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1119&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1119&w=2
CVE: CVE-2004-0424
Published: 2004-07-07
Description: Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.
CVSS Score: 7.2 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1153&w=2
CVE: CVE-2004-0426
Published: 2004-07-07
Description: rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2018&w=2; http://rsync.samba.org/; http://secunia.com/advisories/11514
CVE: CVE-2004-0427
Published: 2004-07-07
Description: The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.
CVSS Score: 2.1 (LOW)
CWE: CWE-401
References: ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc; ftp://patches.sgi.com/support/free/security/advisories/20040505-01-U.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846