deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2004-0432
Published: 2004-08-18
Description: ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions.
CVSS Score: 7.5 (HIGH)
References: http://bugs.proftpd.org/show_bug.cgi?id=2267; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8523&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1341&w=2
CVE: CVE-2004-0433
Published: 2004-08-18
Description: Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP (realrtsp) streams, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (a) long URLs, (b) long Real server responses, or (c) long Real Data Transport (RDT) packets.
CVSS Score: 10.0 (HIGH)
References: http://security.gentoo.org/glsa/glsa-200405-24.xml; http://www.xinehq.de/index.php/security/XSA-2004-3; https://exchange.xforce.ibmcloud.com/vulnerabilities/16019
CVE: CVE-2004-0435
Published: 2004-08-18
Description: Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not properly handle the MS_INVALIDATE operation, which leads to cache consistency problems that allow a local user to prevent certain changes to files from being committed to disk.
CVSS Score: 3.6 (LOW)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:11.msync.asc; http://secunia.com/advisories/11714; http://www.securityfocus.com/bid/10416
CVE: CVE-2004-0476
Published: 2004-08-18
Description: Buffer overflow in 3Com OfficeConnect Remote 812 ADSL Router 1.1.9.4 allows remote attackers to cause a denial of service (reboot or packet loss) via a long string containing Telnet escape characters to the Telnet port.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/11716; http://www.idefense.com/application/poi/display?id=105&type=vulnerabilities; http://www.securityfocus.com/bid/10419
CVE: CVE-2004-0487
Published: 2004-08-18
Description: A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service (resource consumption) and possibly execute arbitrary programs.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8455&w=2; http://secunia.com/advisories/11676; http://www.ciac.org/ciac/bulletins/o-149.shtml
CVE: CVE-2004-0490
Published: 2004-08-18
Description: cPanel, when compiling Apache 1.3.29 and PHP with the mod_phpsuexec option, does not set the --enable-discard-path option, which causes php to use the SCRIPT_FILENAME variable to find and execute a script instead of the PATH_TRANSLATED variable, which allows local users to execute arbitrary PHP code as other users via a URL that references the attacker's script after the user's script, which executes the attacker's script with the user's privileges, a different vulnerability than CVE-2004-0529.
CVSS Score: 7.2 (HIGH)
References: http://bugzilla.cpanel.net/show_bug.cgi?id=283; http://bugzilla.cpanel.net/show_bug.cgi?id=664; http://www.a-squad.com/audit/explain10.html
CVE: CVE-2004-0501
Published: 2004-08-18
Description: Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message containing a Vector Markup Language (VML) entity whose src parameter points to the remote site, which could allow remote attackers to know when a message has been read, verify valid e-mail addresses, and possibly leak other information.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9965&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5607&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]9698&w=2
CVE: CVE-2004-0502
Published: 2004-08-18
Description: Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original message, which allows remote attackers to bypass zone restrictions and exploit other issues that rely on predictable locations, as demonstrated using a shell: URI.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2655&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5607&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]9698&w=2
CVE: CVE-2004-0503
Published: 2004-08-18
Description: Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0885.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8605&w=2; http://secunia.com/advisories/11629
CVE: CVE-2004-0504
Published: 2004-08-18
Description: Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc; ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916
CVE: CVE-2004-0505
Published: 2004-08-18
Description: The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via unknown attack vectors.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc; ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916
CVE: CVE-2004-0506
Published: 2004-08-18
Description: The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash) via unknown attack vectors that cause a null pointer dereference.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc; ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916
CVE: CVE-2004-0507
Published: 2004-08-18
Description: Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVSS Score: 10.0 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc; ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916
CVE: CVE-2004-0513
Published: 2004-08-18
Description: Unspecified vulnerability in Mac OS X before 10.3.4 has unknown impact and attack vectors related to "logging when tracing system calls."
CVSS Score: 10.0 (HIGH)
References: http://lists.apple.com/archives/security-announce/2004/May/msg00005.html; http://www.securityfocus.com/bid/10432; http://www.securitytracker.com/alerts/2004/May/1010329.html
CVE: CVE-2004-0514
Published: 2004-08-18
Description: Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of directory services lookups."
CVSS Score: 7.2 (HIGH)
References: http://lists.seifried.org/pipermail/security/2004-May/003743.html; http://securitytracker.com/id?1010330; http://www.kb.cert.org/vuls/id/174790
CVE: CVE-2004-0515
Published: 2004-08-18
Description: Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of console log files."
CVSS Score: 4.6 (MEDIUM)
References: http://lists.seifried.org/pipermail/security/2004-May/003743.html; http://securitytracker.com/id?1010330; http://www.securityfocus.com/bid/10432
CVE: CVE-2004-0516
Published: 2004-08-18
Description: Unknown vulnerability in Mac OS X 10.3.4, related to "package installation scripts," a different vulnerability than CVE-2004-0517.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.seifried.org/pipermail/security/2004-May/003743.html; http://securitytracker.com/id?1010331; http://www.securityfocus.com/bid/10432
CVE: CVE-2004-0517
Published: 2004-08-18
Description: Unknown vulnerability in Mac OS X 10.3.4, related to "handling of process IDs during package installation," a different vulnerability than CVE-2004-0516.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.seifried.org/pipermail/security/2004-May/003743.html; http://securitytracker.com/id?1010331; http://www.securityfocus.com/bid/10432
CVE: CVE-2004-0518
Published: 2004-08-18
Description: Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to "the use of SSH and reporting errors," has unknown impact and attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://lists.seifried.org/pipermail/security/2004-May/003743.html; http://securitytracker.com/id?1010333; https://exchange.xforce.ibmcloud.com/vulnerabilities/16288
CVE: CVE-2004-0519
Published: 2004-08-18
Description: Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.
CVSS Score: 6.8 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0260
CVE: CVE-2004-0520
Published: 2004-08-18
Description: Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as demonstrated using read_body.php.
CVSS Score: 6.8 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5078&w=2
CVE: CVE-2004-0521
Published: 2004-08-18
Description: SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.
CVSS Score: 10.0 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858; http://marc.info/?l=squirrelmail-cvs&m=[PII_REDACTED]9888
CVE: CVE-2004-0523
Published: 2004-08-18
Description: Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.
CVSS Score: 10.0 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc; ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860
CVE: CVE-2004-0630
Published: 2004-08-18
Description: The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters ("`" or backtick) in the filename of the PDF file that is provided to the uudecode command.
CVSS Score: 10.0 (HIGH)
References: http://security.gentoo.org/glsa/glsa-200408-14.xml; http://www.adobe.com/support/techdocs/322914.html; http://www.idefense.com/application/poi/display?id=124&type=vulnerabilities
CVE: CVE-2004-0631
Published: 2004-08-18
Description: Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via a long filename for the PDF file that is provided to the uudecode command.
CVSS Score: 10.0 (HIGH)
References: http://security.gentoo.org/glsa/glsa-200408-14.xml; http://www.adobe.com/support/techdocs/322914.html; http://www.idefense.com/application/poi/display?id=125&type=vulnerabilities
CVE: CVE-2004-0722
Published: 2004-08-18
Description: Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute arbitrary code.
CVSS Score: 10.0 (HIGH)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt; http://bugzilla.mozilla.org/show_bug.cgi?id=236618; http://www.idefense.com/application/poi/display?id=117&type=vulnerabilities
CVE: CVE-2004-0757
Published: 2004-08-18
Description: Heap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, may allow remote POP3 mail servers to execute arbitrary code.
CVSS Score: 10.0 (HIGH)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt; http://bugzilla.mozilla.org/show_bug.cgi?id=229374; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9363&w=2
CVE: CVE-2004-0758
Published: 2004-08-18
Description: Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt; http://bugzilla.mozilla.org/show_bug.cgi?id=249004; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9363&w=2
CVE: CVE-2004-0759
Published: 2004-08-18
Description: Mozilla before 1.7 allows remote web servers to read arbitrary files via Javascript that sets the value of an <input type="file"> tag.
CVSS Score: 6.4 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt; http://bugzilla.mozilla.org/show_bug.cgi?id=241924; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9363&w=2
CVE: CVE-2004-0760
Published: 2004-08-18
Description: Mozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than expected via a null character (%00) in an FTP URI.
CVSS Score: 6.4 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt; http://bugzilla.mozilla.org/show_bug.cgi?id=250906; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9363&w=2
CVE: CVE-2004-0761
Published: 2004-08-18
Description: Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use certain redirect sequences to spoof the security lock icon that makes a web page appear to be encrypted.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt; http://bugzilla.mozilla.org/show_bug.cgi?id=240053; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9363&w=2
CVE: CVE-2004-0762
Published: 2004-08-18
Description: Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt; http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.html; http://bugzilla.mozilla.org/show_bug.cgi?id=162020
CVE: CVE-2004-0763
Published: 2004-08-18
Description: Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the "onunload" method.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt; http://bugzilla.mozilla.org/show_bug.cgi?id=253121; http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/024372.html
CVE: CVE-2004-0764
Published: 2004-08-18
Description: Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language (XUL) files.
CVSS Score: 10.0 (HIGH)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt; http://bugzilla.mozilla.org/show_bug.cgi?id=244965; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9363&w=2
CVE: CVE-2004-0765
Published: 2004-08-18
Description: The cert_TestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, only checks the hostname portion of a certificate when the hostname portion of the URI is not a fully qualified domain name (FQDN), which allows remote attackers to spoof trusted certificates.
CVSS Score: 7.5 (HIGH)
References: http://bugzilla.mozilla.org/show_bug.cgi?id=234058; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9363&w=2; http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7
CVE: CVE-2004-0766
Published: 2004-08-18
Description: NGSEC StackDefender 2.0 allows attackers to cause a denial of service (system crash) via an invalid address for the BaseAddress parameter to the hooks for the (1) ZwAllocateVirtualMemory or (2) ZwProtectVirtualMemory functions.
CVSS Score: 5.0 (MEDIUM)
References: http://www.idefense.com/application/poi/display?id=119&type=vulnerabilities&flashstatus=false; https://exchange.xforce.ibmcloud.com/vulnerabilities/16892; http://www.idefense.com/application/poi/display?id=119&type=vulnerabilities&flashstatus=false
CVE: CVE-2004-0767
Published: 2004-08-18
Description: NGSEC StackDefender 1.10 allows attackers to cause a denial of service (system crash) via an invalid address for the ObjectAttribues parameter to the hooks for the (1) ZwCreateFile or (2) ZwOpenFile functions.
CVSS Score: 5.0 (MEDIUM)
References: http://www.idefense.com/application/poi/display?id=118&type=vulnerabilities&flashstatus=false; https://exchange.xforce.ibmcloud.com/vulnerabilities/16879; http://www.idefense.com/application/poi/display?id=118&type=vulnerabilities&flashstatus=false
CVE: CVE-2004-0769
Published: 2004-08-18
Description: Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers for a .LHZ archive, as originally demonstrated using the "x" option but also exploitable through "l" and "v", and fixed in header.c, a different issue than CVE-2004-0771.
CVSS Score: 10.0 (HIGH)
References: http://bugs.gentoo.org/show_bug.cgi?id=51285; http://lw.ftw.zamosc.pl/lha-exploit.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4379&w=2
CVE: CVE-2004-0779
Published: 2004-08-18
Description: The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via SSL encrypted sessions to the site, which allows a remote attacker to cause a cached password to be sent in cleartext to a spoofed site.
CVSS Score: 7.5 (HIGH)
References: http://bugzilla.mozilla.org/show_bug.cgi?id=226278; http://www.mandriva.com/security/advisories?name=MDKSA-2004:082; http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7
CVE: CVE-2004-0839
Published: 2004-08-18
Description: Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3335&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6652&w=2; http://seclists.org/lists/fulldisclosure/2004/Aug/0868.html
CVE: CVE-2004-1724
Published: 2004-08-18
Description: The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups directory to world read/write/execute (777), which allows remote attackers to download or view database backups, which have easily guessable filenames and contain the administrator username and password.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1685&w=2; http://secunia.com/advisories/12336; http://www.securityfocus.com/bid/10974
CVE: CVE-2004-1726
Published: 2004-08-20
Description: Multiple integer overflows in (1) xviris.c, (2) xvpcx.c, and (3) xvpm.c in XV allow remote attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5092&w=2; http://www.securityfocus.com/bid/10985; https://exchange.xforce.ibmcloud.com/vulnerabilities/17053
CVE: CVE-2004-1727
Published: 2004-08-20
Description: BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connections from the same IP address.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2208&w=2; http://secunia.com/advisories/12346; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]4
CVE: CVE-2004-1728
Published: 2004-08-20
Description: Buffer overflow in British National Corpus SARA (sarad) allows remote attackers to execute arbitrary code by calling the client with a long string.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2827&w=2; http://secunia.com/advisories/12348; http://www.securityfocus.com/bid/10984
CVE: CVE-2004-1729
Published: 2004-08-20
Description: Cross-site scripting (XSS) vulnerability in Nihuo Web Log Analyzer 1.6 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8449&w=2; http://secunia.com/advisories/12347; http://www.securityfocus.com/bid/10988
CVE: CVE-2004-1731
Published: 2004-08-20
Description: signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail address.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7345&w=2; http://www.securityfocus.com/bid/10995; https://exchange.xforce.ibmcloud.com/vulnerabilities/17093
CVE: CVE-2004-1732
Published: 2004-08-20
Description: SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7280&w=2; http://secunia.com/advisories/12340; http://www.securityfocus.com/bid/10996
CVE: CVE-2004-1733
Published: 2004-08-20
Description: Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary files via .. (dot dot) sequences in the URL.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7280&w=2; http://secunia.com/advisories/12340; http://www.securityfocus.com/bid/10996
CVE: CVE-2004-1735
Published: 2004-08-21
Description: Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject arbitrary web script or HTML via the description field.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7604&w=2; http://secunia.com/advisories/12339; http://www.securityfocus.com/bid/10992
CVE: CVE-2004-1739
Published: 2004-08-23
Description: Bird Chat 1.61 allows remote attackers to cause a denial of service (crash) via invalid users.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4287&w=2; http://secunia.com/advisories/12365; http://www.autistici.org/fdonato/advisory/BirdChat1.61-adv.txt
CVE: CVE-2004-1740
Published: 2004-08-23
Description: Music daemon (musicd) 0.0.3 and earlier allows remote attackers to read arbitrary files by calling LOAD with a full pathname, then calling SHOWLIST.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6595&w=2; http://musicdaemon.sourceforge.net/; http://www.securityfocus.com/bid/11006