deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2004-0049
Published: 2004-02-17
Description: Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port.
CVSS Score: 6.8 (MEDIUM)
References: http://seclists.org/lists/vulnwatch/2004/Jan-Mar/0057.html; http://service.real.com/help/faq/security/040112_dos/; http://service.real.com/help/faq/security/security022604.html
CVE: CVE-2004-0054
Published: 2004-02-17
Description: Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
CVSS Score: 7.5 (HIGH)
References: http://www.cert.org/advisories/CA-2004-01.html; http://www.cisco.com/warp/public/707/cisco-sa-20040113-h323.shtml; http://www.kb.cert.org/vuls/id/749342
CVE: CVE-2004-0055
Published: 2004-02-17
Description: The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2004-008.0.txt; ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt; ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc
CVE: CVE-2004-0056
Published: 2004-02-17
Description: Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
CVSS Score: 7.5 (HIGH)
References: http://www.cert.org/advisories/CA-2004-01.html; http://www.kb.cert.org/vuls/id/749342; http://www.securityfocus.com/bid/9406
CVE: CVE-2004-0057
Published: 2004-02-17
Description: The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2004-008.0.txt; ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt; ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc
CVE: CVE-2004-0058
Published: 2004-02-17
Description: Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary files via a symlink attack on the .pid_antivir_$$ temporary file.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3763&w=2; http://secunia.com/advisories/10620; http://www.osvdb.org/3496
CVE: CVE-2004-0059
Published: 2004-02-17
Description: Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier allows remote attackers to overwrite arbitrary files via .. (dot dot) sequences in the filename parameter of a Content-Disposition: header.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3201&w=2; http://www.securitytracker.com/id?1008779; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3201&w=2
CVE: CVE-2004-0060
Published: 2004-02-17
Description: WWW File Share Pro 2.42 and earlier allows remote attackers to cause a denial of service (crash) via a large POST request.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3201&w=2; http://www.securitytracker.com/id?1008779; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3201&w=2
CVE: CVE-2004-0061
Published: 2004-02-17
Description: WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access restrictions via (1) a URL with a trailing . (dot), or (2) a URI with a leading slash or backslash character.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3201&w=2; http://www.securitytracker.com/id?1008779; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3201&w=2
CVE: CVE-2004-0062
Published: 2004-02-17
Description: Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before 3.1 allows remote attackers to "cause negative totals" via an order with a large quantity.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3994&w=2; http://www.securitytracker.com/id?1008731; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3994&w=2
CVE: CVE-2004-0063
Published: 2004-02-17
Description: The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a Status_OK value even if the HSM returns a different status code, which could cause applications to make incorrect security-critical decisions, e.g. by accepting an invalid PIN number.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3569&w=2; http://www.ncipher.com/support/advisories/advisory8_payshield.html; http://www.osvdb.org/3537
CVE: CVE-2004-0064
Published: 2004-02-17
Description: The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite arbitrary files via a symlink attack on files within the tmp.SuSEconfig.gnome-filesystem.$RANDOM temporary directory.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0437&w=2; http://secunia.com/advisories/10623; http://www.osvdb.org/3460
CVE: CVE-2004-0065
Published: 2004-02-17
Description: Multiple SQL injection vulnerabilities in phpGedView before 2.65 allow remote attackers to execute arbitrary SQL via (1) timeline.php and (2) placelist.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5478&w=2; http://www.securityfocus.com/bid/11910; http://www.securityfocus.com/bid/11925
CVE: CVE-2004-0066
Published: 2004-02-17
Description: phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via malformed parameters to (1) indilist.php, (2) famlist.php, (3) placelist.php, (4) imageview.php, (5) timeline.php, (6) clippings.php, (7) login.php, and (8) gdbi.php.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5478&w=2; http://www.osvdb.org/3464; https://exchange.xforce.ibmcloud.com/vulnerabilities/14215
CVE: CVE-2004-0067
Published: 2004-02-17
Description: Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary HTML or web script via (1) descendancy.php, (2) index.php, (3) individual.php, (4) login.php, (5) relationship.php, (6) source.php, (7) imageview.php, (8) calendar.php, (9) gedrecord.php, (10) login.php, and (11) gdbi_interface.php.  NOTE: some aspects of vector 10 were later reported to affect 4.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5478&w=2; http://secunia.com/advisories/26628; http://securitytracker.com/id?1018613
CVE: CVE-2004-0068
Published: 2004-02-17
Description: PHP remote file inclusion vulnerability in config.php for PhpDig 1.6.5 and earlier allows remote attackers to execute arbitrary PHP code by modifying the $relative_script_path parameter to reference a URL on a remote web server that contains the code.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8671&w=2; http://www.phpdig.net/showthread.php?s=58bcc71c822830ec3bbdaae6d56846e0&threadid=393; http://www.securityfocus.com/bid/9424
CVE: CVE-2004-0069
Published: 2004-02-17
Description: Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5273&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4761&w=2; http://www.securityfocus.com/bid/9385
CVE: CVE-2004-0070
Published: 2004-02-17
Description: PHP remote file inclusion vulnerability in module.php for ezContents allows remote attackers to execute arbitrary PHP code by modifying the link parameter to reference a URL on a remote web server that contains the code.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5627&w=2; http://www.ezcontents.org/forum/viewtopic.php?t=361; http://www.osvdb.org/6878
CVE: CVE-2004-0071
Published: 2004-02-17
Description: Directory traversal vulnerability in buildManPage in class.manpagelookup.php for PHP Man Page Lookup 1.2.0 allows remote attackers to read arbitrary files via the command parameter ($cmd variable) to index.php.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8403&w=2; http://www.securityfocus.com/bid/9395; http://www.securitytracker.com/id?1008689
CVE: CVE-2004-0072
Published: 2004-02-17
Description: Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via encoded \.. (backslash .., "%5c%2e%2e") sequences in an HTTP request.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0274.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5418&w=2; http://secunia.com/advisories/10600
CVE: CVE-2004-0073
Published: 2004-02-17
Description: PHP remote file inclusion vulnerability in (1) config.php and (2) config_page.php for EasyDynamicPages 2.0 allows remote attackers to execute arbitrary PHP code by modifying the edp_relative_path parameter to reference a URL on a remote web server that contains a malicious serverdata.php script.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7707&w=2; http://secunia.com/advisories/10535; http://securitytracker.com/id?1008584
CVE: CVE-2004-0074
Published: 2004-02-17
Description: Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via (1) a long LANG environment variable, or (2) a long -xsokdir command line argument, a different vulnerability than CVE-2003-0949.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7259&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8529&w=2; http://www.securityfocus.com/bid/9341
CVE: CVE-2004-0091
Published: 2004-02-17
Description: NOTE: this issue has been disputed by the vendor.  Cross-site scripting (XSS) vulnerability in register.php for unknown versions of vBulletin allows remote attackers to inject arbitrary HTML or web script via the reg_site (or possibly regsite) parameter.  NOTE: the vendor has disputed this issue, saying "There is no hidden field called 'reg_site', nor any $reg_site variable anywhere in the vBulletin 2 or vBulletin 3 source code or templates, nor has it ever existed.  We can only assume that this vulnerability was found in a site running code modified from that supplied by Jelsoft.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4945&w=2; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]7040&w=2; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]1619&w=2
CVE: CVE-2004-0095
Published: 2004-02-17
Description: McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow.
CVSS Score: 5.0 (MEDIUM)
References: http://download.nai.com/products/patches/ePO/v3.1.0/EPO3013.zip; http://www.osvdb.org/3744; http://www.securityfocus.com/bid/9476
CVE: CVE-2004-2136
Published: 2004-02-19
Description: dm-crypt on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=linux-kernel&m=[PII_REDACTED]1935&w=2; http://mareichelt.de/pub/notmine/diskenc.pdf; http://www.securiteam.com/exploits/5UP0P1PFPM.html
CVE: CVE-2004-0466
Published: 2004-02-21
Description: WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service (hang) via a URL containing an MS-DOS device name such as (1) AUX, (2) CON, (3) PRN, (4) COM1, or (5) LPT1.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0145&w=2; http://secunia.com/advisories/14006/; http://www.cirt.dk/advisories/cirt-29-advisory.pdf
CVE: CVE-2004-0322
Published: 2004-02-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary script as other users via the (1) member parameter in member.php, (2) uid parameter in u2uadmin.php, (3) user parameter in editprofile.php, (4) an onmouseover event in an align tag when bbcode is allowed, or (5) img tag where bbcode is allowed.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2004-02/0645.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5179&w=2; http://www.securityfocus.com/bid/9726
CVE: CVE-2004-0324
Published: 2004-02-23
Description: Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as ", `, |, ;, or $.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1858&w=2; http://www.securityfocus.com/bid/9728; https://exchange.xforce.ibmcloud.com/vulnerabilities/15290
CVE: CVE-2004-1360
Published: 2004-02-27
Description: Unknown vulnerability in conv_fix in Sun Solaris 7 through 9, when invoked by conv_lpd, allows local users to overwrite arbitrary files.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/10991; http://sunsolve.sun.com/search/document.do?assetkey=1-26-57509-1; http://www.auscert.org.au/render.html?it=3902
CVE: CVE-2004-0944
Published: 2004-02-28
Description: The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 generates easily predictable web session IDs, which allows remote attackers to hijack other sessions via the parentsessionid cookie.
CVSS Score: 5.0 (MEDIUM)
References: http://www.corsaire.com/advisories/c040817-002.txt; http://www.mitel.com/DocController?documentId=14223; http://www.niscc.gov.uk/niscc/docs/re-20[PII_REDACTED]8.pdf?lang=en
CVE: CVE-2002-1574
Published: 2004-03-03
Description: Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors.
CVSS Score: 4.6 (MEDIUM)
References: http://www.ciac.org/ciac/bulletins/n-096.shtml; http://www.redhat.com/support/errata/RHSA-2002-205.html; http://www.redhat.com/support/errata/RHSA-2002-206.html
CVE: CVE-2002-1575
Published: 2004-03-03
Description: cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline (%0a) characters in parameters such as "required-subject," which can be used to modify the CC, BCC, and other header fields in the generated email message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7053&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5768&w=2; http://www.debian.org/security/2004/dsa-437
CVE: CVE-2003-0441
Published: 2004-03-03
Description: Multiple buffer overflows in Orville Write (orville-write) 2.53 and earlier allow local users to gain privileges.
CVSS Score: 7.2 (HIGH)
References: http://www.debian.org/security/2003/dsa-326; http://www.securityfocus.com/bid/7988; https://exchange.xforce.ibmcloud.com/vulnerabilities/12381
CVE: CVE-2003-0818
Published: 2004-03-03
Description: Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5615&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4825&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]7367&w=2
CVE: CVE-2003-0825
Published: 2004-03-03
Description: The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.ciac.org/ciac/bulletins/o-077.shtml; http://www.kb.cert.org/vuls/id/445214; http://www.osvdb.org/3903
CVE: CVE-2003-0987
Published: 2004-03-03
Description: mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4207&w=2; http://security.gentoo.org/glsa/glsa-200405-22.xml; http://securitytracker.com/id?1008920
CVE: CVE-2003-0991
Published: 2004-03-03
Description: Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote attackers to cause a denial of service (crash) via malformed e-mail commands.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842; http://mail.python.org/pipermail/mailman-announce/2004-February/000067.html
CVE: CVE-2004-0002
Published: 2004-03-03
Description: The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resource exhaustion) via (1) a low MTU, which causes a large number of small packets to be produced, or (2) via a large number of packets with a small TCP payload, which cause a large number of calls to the resource-intensive sowakeup function.
CVSS Score: 10.0 (HIGH)
References: http://lists.freebsd.org/pipermail/cvs-src/2004-January/016271.html; http://lists.freebsd.org/pipermail/cvs-src/2004-January/016271.html
CVE: CVE-2004-0003
Published: 2004-03-03
Description: Unknown vulnerability in Linux kernel before 2.4.22 allows local users to gain privileges, related to "R128 DRI limits checking."
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/10782; http://secunia.com/advisories/10911; http://secunia.com/advisories/10912
CVE: CVE-2004-0005
Published: 2004-03-03
Description: Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) octal encoding in yahoo_decode that causes a null byte to be written beyond the buffer, (2) octal encoding in yahoo_decode that causes a pointer to reference memory beyond the terminating null byte, (3) a quoted printable string to the gaim_quotedp_decode MIME decoder that causes a null byte to be written beyond the buffer, and (4) quoted printable encoding in gaim_quotedp_decode that causes a pointer to reference memory beyond the terminating null byte.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-193
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6318&w=2
CVE: CVE-2004-0006
Published: 2004-03-03
Description: Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.
CVSS Score: 7.5 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc; ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc; http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html
CVE: CVE-2004-0007
Published: 2004-03-03
Description: Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6318&w=2
CVE: CVE-2004-0008
Published: 2004-03-03
Description: Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc; ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc; http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html
CVE: CVE-2004-0009
Published: 2004-03-03
Description: Apache-SSL 1.3.28+1.52 and earlier, with SSLVerifyClient set to 1 or 3 and SSLFakeBasicAuth enabled, allows remote attackers to forge a client certificate by using basic authentication with the "one-line DN" of the target user.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016870.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1765&w=2; http://www.apache-ssl.org/advisory-20040206.txt
CVE: CVE-2004-0010
Published: 2004-03-03
Description: Stack-based buffer overflow in the ncp_lookup function for ncpfs in Linux kernel 2.4.x allows local users to gain privileges.
CVSS Score: 7.2 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000820; http://fedoranews.org/updates/FEDORA-2004-079.shtml; http://www.ciac.org/ciac/bulletins/o-082.shtml
CVE: CVE-2004-0039
Published: 2004-03-03
Description: Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3 allows remote attackers to execute arbitrary code via HTTP requests that cause format string specifiers to be used in an error message, as demonstrated using the scheme of a URI.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7031&w=2; http://www.checkpoint.com/techsupport/alerts/security_server.html; http://www.ciac.org/ciac/bulletins/o-072.shtml
CVE: CVE-2004-0040
Published: 2004-03-03
Description: Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows remote attackers to execute arbitrary code via an ISAKMP packet with a large Certificate Request packet.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7031&w=2; http://www.ciac.org/ciac/bulletins/o-073.shtml; http://www.kb.cert.org/vuls/id/873334
CVE: CVE-2004-0047
Published: 2004-03-03
Description: Multiple programs in trr19 1.0 do not properly drop privileges before executing a system command, which could allow local users to gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/10744/; http://secunia.com/advisories/10745; http://www.debian.org/security/2004/dsa-430
CVE: CVE-2004-0077
Published: 2004-03-03
Description: The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0040.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000820; http://fedoranews.org/updates/FEDORA-2004-079.shtml