deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2004-1680
Published: 2004-09-13
Description: application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to cause a denial of service (VxWorks OS crash) via a long HTTP GET request, possibly triggering a buffer overflow.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/12523; http://www.atstake.com/research/advisories/2004/a091304-2.txt; http://www.securityfocus.com/bid/11161
CVE: CVE-2004-1683
Published: 2004-09-13
Description: A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the PATH environment variable to reference a malicious io-graphics program before is executed by crrtrap.
CVSS Score: 3.7 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4357&w=2; http://www.securityfocus.com/bid/11165; https://exchange.xforce.ibmcloud.com/vulnerabilities/17345
CVE: CVE-2004-1684
Published: 2004-09-13
Description: Zyxel P681 running ZyNOS Vt020225a contains portions of memory in an ARP request, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1448&w=2; http://www.osvdb.org/9962; http://www.securityfocus.com/bid/11167
CVE: CVE-2004-0831
Published: 2004-09-14
Description: McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the System Tray applet, which could allow local users to gain privileges.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9728&w=2; http://www.idefense.com/application/poi/display?id=140&type=vulnerabilities; https://exchange.xforce.ibmcloud.com/vulnerabilities/17367
CVE: CVE-2004-0905
Published: 2004-09-14
Description: Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in another domain.
CVSS Score: 4.6 (MEDIUM)
References: http://bugzilla.mozilla.org/show_bug.cgi?id=250862; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4418&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9363&w=2
CVE: CVE-2004-1685
Published: 2004-09-15
Description: SMC routers SMC7004VWBR running firmware 1.00.014 and SMC7008ABR EU running firmware 1.42.003 allow remote attackers to bypass authentication by connecting to it from the same IP address as the administrator who is logged in, then accessing the setup_status.htm or status.HTM pages.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4160&w=2; http://secunia.com/advisories/12601; http://www.osvdb.org/10088
CVE: CVE-2004-1686
Published: 2004-09-15
Description: Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTML page that contains an Internet Explorer formatted comment between the DOCTYPE tag and the HTML tag, as demonstrated using the DesignScience MathPlayer ActiveX plugin.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0153&w=2; http://www.securityfocus.com/bid/11200; https://exchange.xforce.ibmcloud.com/vulnerabilities/20617
CVE: CVE-2004-0801
Published: 2004-09-16
Description: Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.12/SCOSA-2005.12.txt; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000880; http://lists.suse.com/archive/suse-security-announce/2006-May/0007.html
CVE: CVE-2004-0809
Published: 2004-09-16
Description: The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access.
CVSS Score: 5.0 (MEDIUM)
References: http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/dav/fs/lock.c?r1=1.32&r2=1.33; http://www.debian.org/security/2004/dsa-558; http://www.gentoo.org/security/en/glsa/glsa-200409-21.xml
CVE: CVE-2004-0827
Published: 2004-09-16
Description: Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/28800; http://sunsolve.sun.com/search/document.do?assetkey=1-26-231321-1; http://sunsolve.sun.com/search/document.do?assetkey=1-66-201006-1
CVE: CVE-2004-0866
Published: 2004-09-16
Description: Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1898&w=2; http://securitytracker.com/id?1011332; http://www.securityfocus.com/bid/11186
CVE: CVE-2004-0869
Published: 2004-09-16
Description: Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
CVSS Score: 5.0 (MEDIUM)
References: http://securityfocus.com/archive/1/375407; http://securitytracker.com/id?1011332; http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt
CVE: CVE-2004-0870
Published: 2004-09-16
Description: KDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
CVSS Score: 5.0 (MEDIUM)
References: http://securityfocus.com/archive/1/375407; http://securitytracker.com/id?1011330; http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt
CVE: CVE-2004-0871
Published: 2004-09-16
Description: Mozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
CVSS Score: 5.0 (MEDIUM)
References: http://securityfocus.com/archive/1/375407; http://securitytracker.com/id?1011331; http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt
CVE: CVE-2004-0872
Published: 2004-09-16
Description: Opera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-669
References: http://securityfocus.com/archive/1/375407; http://securitytracker.com/id?1011329; http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt
CVE: CVE-2004-1379
Published: 2004-09-16
Description: Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a (1) DVD or (2) MPEG subpicture header where the second field reuses RLE data from the end of the first field.
CVSS Score: 7.5 (HIGH)
References: http://slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.320308; http://www.debian.org/security/2005/dsa-657; http://www.gentoo.org/security/en/glsa/glsa-200409-30.xml
CVE: CVE-2004-1687
Published: 2004-09-16
Description: CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3691&w=2; http://secunia.com/advisories/12590
CVE: CVE-2004-1688
Published: 2004-09-16
Description: Pigeon Server 3.02.0143 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a long login name sent to port 3103.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026515.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1724&w=2; http://secunia.com/advisories/12585
CVE: CVE-2004-1689
Published: 2004-09-16
Description: sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9201&w=2; http://packetstormsecurity.nl/0409-exploits/sudoedit.txt; http://secunia.com/advisories/12596
CVE: CVE-2004-0534
Published: 2004-09-17
Description: Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when uploading a document.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0057.html; http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026550.html; http://secunia.com/advisories/12587/
CVE: CVE-2004-1690
Published: 2004-09-18
Description: Cross-site scripting (XSS) vulnerability in the Web Server in DNS4Me 3.0.0.4 allows remote attackers to execute arbitrary web script or HTML via the URL.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1493&w=2; http://secunia.com/advisories/12595; http://securitytracker.com/id?1011334
CVE: CVE-2004-1691
Published: 2004-09-18
Description: The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service (CPU consumption and crash) via a large amount of data.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1493&w=2; http://secunia.com/advisories/12595; http://securitytracker.com/id?1011334
CVE: CVE-2004-1692
Published: 2004-09-18
Description: Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary web script or HTML via the (1) Itemid, (2) mosmsg, or (3) limit parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://mamboforge.net/frs/shownotes.php?release_id=1672; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3158&w=2; http://www.osvdb.org/10179
CVE: CVE-2004-1693
Published: 2004-09-18
Description: PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to reference a URL on a remote web server that contains the code.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3158&w=2; http://securitytracker.com/id?1011365; http://www.osvdb.org/10180
CVE: CVE-2004-1695
Published: 2004-09-20
Description: EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL that contains an extra leading / (slash).
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8374&w=2; http://secunia.com/advisories/12616; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]4
CVE: CVE-2004-1378
Published: 2004-09-21
Description: The expat XML parser code, as used in the open source Jabber (jabberd) 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other packages, allows remote attackers to cause a denial of service (application crash) via a malformed packet to a socket that accepts XML connections.
CVSS Score: 5.0 (MEDIUM)
References: http://devel.amessage.info/jabberd14/; http://mail.jabber.org/pipermail/jabberd/2004-September/002004.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2679&w=2
CVE: CVE-2004-1694
Published: 2004-09-21
Description: Symantec ON Command CCM 5.4.x and iCommand 3.0.x has four default usernames and passwords, one of which is hardcoded, which allows remote attackers to gain unauthorized access.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1784&w=2; http://secunia.com/advisories/12604; http://www.sarc.com/avcenter/security/Content/2004.09.29.html
CVE: CVE-2004-1696
Published: 2004-09-21
Description: EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to cause a denial of service (application crash) via a sequence of carriage returns sent to TCP port 66.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8374&w=2; http://secunia.com/advisories/12616; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]4
CVE: CVE-2004-1697
Published: 2004-09-21
Description: The "Forgot your Password" link in Computer Associates (CA) Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9320&w=2; http://secunia.com/advisories/12620; http://www.securityfocus.com/bid/11229
CVE: CVE-2004-1699
Published: 2004-09-21
Description: SettingsBase.php in Pinnacle ShowCenter 1.51 allows remote attackers to cause a denial of service (web interface errors) via an invalid Skin parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026733.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0196&w=2; http://www.securityfocus.com/bid/11232
CVE: CVE-2004-1698
Published: 2004-09-24
Description: The Base64 function in PopMessenger 1.60 (before 20 Sep 2004) and earlier allows remote attackers to cause a denial of service (application crash) via invalid characters in a message, which causes several alert dialogs to be displayed and leads to a crash.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8899&w=2; http://secunia.com/advisories/12612/; http://www.securityfocus.com/bid/11230
CVE: CVE-2002-1583
Published: 2004-09-28
Description: Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument.
CVSS Score: 7.2 (HIGH)
References: http://www.iss.net/security_center/static/9078.php; http://www.securityfocus.com/bid/4817; http://www.securitytracker.com/alerts/2002/May/1004352.html
CVE: CVE-2003-0105
Published: 2004-09-28
Description: ServerMask 2.2 and earlier does not obfuscate (1) ETag, (2) HTTP Status Message, or (3) Allow HTTP responses, which could tell remote attackers that the web server is an IIS server.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2682&w=2; http://www.corsaire.com/advisories/c030224-001.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/16947
CVE: CVE-2003-0928
Published: 2004-09-28
Description: Clearswift MAILsweeper before 4.3.15 does not properly detect and filter RAR 3.20 encoded files, which allows remote attackers to bypass intended policy.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8678&w=2; http://www.corsaire.com/advisories/c030807-001.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8678&w=2
CVE: CVE-2003-0929
Published: 2004-09-28
Description: Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote attackers to bypass intended policy.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8678&w=2; http://www.corsaire.com/advisories/c030807-001.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8678&w=2
CVE: CVE-2003-0930
Published: 2004-09-28
Description: Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex (HQX) encoded files, which allows remote attackers to bypass intended policy.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8678&w=2; http://www.corsaire.com/advisories/c030807-001.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8678&w=2
CVE: CVE-2003-0931
Published: 2004-09-28
Description: Sygate Enforcer 4.0 earlier allows remote attackers to cause a denial of service (service hang) by replaying a malformed discovery packet to UDP port 39999.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2437&w=2; http://www.corsaire.com/advisories/c031120-001.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/16949
CVE: CVE-2003-1049
Published: 2004-09-28
Description: IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions (777), which allows local users to modify or delete certain DB2 files.
CVSS Score: 4.6 (MEDIUM)
References: http://www-1.ibm.com/support/search.wss?rs=0&q=IY44841&apar=only; http://www-1.ibm.com/support/search.wss?rs=0&q=IY44842&apar=only; http://www.securityfocus.com/bid/9243
CVE: CVE-2003-1050
Published: 2004-09-28
Description: Multiple buffer overflows in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via long command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.
CVSS Score: 7.2 (HIGH)
References: http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt; http://www.securityfocus.com/archive/1/343804; http://www.securityfocus.com/bid/8990
CVE: CVE-2003-1051
Published: 2004-09-28
Description: Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.
CVSS Score: 7.2 (HIGH)
References: http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt; http://www.securityfocus.com/archive/1/343804; http://www.securityfocus.com/bid/8989
CVE: CVE-2003-1052
Published: 2004-09-28
Description: IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/331904; http://www.securityfocus.com/bid/8346; https://exchange.xforce.ibmcloud.com/vulnerabilities/12826
CVE: CVE-2004-0163
Published: 2004-09-28
Description: Sygate Secure Enterprise (SSE) 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote attackers to cause a denial of service (resource exhaustion) by capturing a session and repeatedly replaying the session.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1675&w=2; http://www.corsaire.com/advisories/c031120-002.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/16945
CVE: CVE-2004-0200
Published: 2004-09-28
Description: Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.
CVSS Score: 9.3 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9948&w=2; http://www.kb.cert.org/vuls/id/297462; http://www.us-cert.gov/cas/techalerts/TA04-260A.html
CVE: CVE-2004-0408
Published: 2004-09-28
Description: Buffer overflow in the child_service function in the ident2 ident daemon allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://www.debian.org/security/2004/dsa-494; http://www.securityfocus.com/bid/10192; https://exchange.xforce.ibmcloud.com/vulnerabilities/15938
CVE: CVE-2004-0457
Published: 2004-09-28
Description: The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS Score: 4.6 (MEDIUM)
References: http://packages.debian.org/changelogs/pool/main/m/mysql-dfsg/mysql-dfsg_4.0.20-11/changelog; http://www.ciac.org/ciac/bulletins/p-018.shtml; http://www.debian.org/security/2004/dsa-540
CVE: CVE-2004-0458
Published: 2004-09-28
Description: mah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which triggers a null pointer dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: http://www.debian.org/security/2004/dsa-503; http://www.securityfocus.com/bid/10343; https://exchange.xforce.ibmcloud.com/vulnerabilities/16143
CVE: CVE-2004-0500
Published: 2004-09-28
Description: Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call.
CVSS Score: 7.5 (HIGH)
References: http://gaim.sourceforge.net/security/?id=0; http://www.fedoranews.org/updates/FEDORA-2004-278.shtml; http://www.fedoranews.org/updates/FEDORA-2004-279.shtml
CVE: CVE-2004-0558
Published: 2004-09-28
Description: The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000872; http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1316&w=2
CVE: CVE-2004-0573
Published: 2004-09-28
Description: Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute arbitrary code via a malicious document or website.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0906&w=2; http://secunia.com/advisories/12529; http://securitytracker.com/id?1011249
CVE: CVE-2004-0593
Published: 2004-09-28
Description: Sygate Enforcer 3.5MR1 and earlier passes broadcast traffic before authentication, which could allow remote attackers to bypass filtering rules.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6998&w=2; http://www.corsaire.com/advisories/c031120-003.txt; http://www.securityfocus.com/bid/10908
CVE: CVE-2004-0629
Published: 2004-09-28
Description: Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote attackers to execute arbitrary code via a URI for a PDF file with a null terminator (%00) followed by a long string.
CVSS Score: 7.5 (HIGH)
References: http://www.adobe.com/support/techdocs/330527.html; http://www.gentoo.org/security/en/glsa/glsa-200408-14.xml; http://www.idefense.com/application/poi/display?id=126&type=vulnerabilities
CVE: CVE-2004-0642
Published: 2004-09-28
Description: Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-415
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4753&w=2; http://rhn.redhat.com/errata/RHSA-2004-350.html
CVE: CVE-2004-0643
Published: 2004-09-28
Description: Double free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and earlier may allow local users to execute arbitrary code.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-415
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4753&w=2; http://rhn.redhat.com/errata/RHSA-2004-350.html