deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2004-0139
Published: 2005-01-10
Description: Unknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and possibly earlier versions, in which "t_unbind changes t_bind's behavior," has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20040905-01-P.asc; http://secunia.com/advisories/12682; http://www.securityfocus.com/bid/11276
CVE: CVE-2004-0568
Published: 2005-01-10
Description: HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value that is saved in a session file, which allows remote attackers to execute arbitrary code via a malicious HyperTerminal session file (.ht), web site, or Telnet URL contained in an e-mail message, triggering a buffer overflow.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4849&w=2; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-043; https://exchange.xforce.ibmcloud.com/vulnerabilities/18336
CVE: CVE-2004-0571
Published: 2005-01-10
Description: Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Table Conversion Vulnerability," a different vulnerability than CVE-2004-0901.
CVSS Score: 10.0 (HIGH)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-041; https://exchange.xforce.ibmcloud.com/vulnerabilities/18337; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1168
CVE: CVE-2004-0770
Published: 2005-01-10
Description: romload.c in DGen Emulator 1.23 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files during decompression of (1) gzip or (2) bzip ROM files.
CVSS Score: 2.1 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=263282&archive=yes; http://secunia.com/advisories/12214; http://www.securityfocus.com/bid/10855
CVE: CVE-2004-0874
Published: 2005-01-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-1123.  Reason: This candidate is a reservation duplicate of CVE-2004-1123.  Notes: All CVE users should reference CVE-2004-1123 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2004-0883
Published: 2005-01-10
Description: Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information from kernel memory via a samba server (1) returning more data than requested to the smb_proc_read function, (2) returning a data offset from outside the samba packet to the smb_proc_readX function, (3) sending a certain TRANS2 fragmented packet to the smb_receive_trans2 function, (4) sending a samba packet with a certain header size to the smb_proc_readX_data function, or (5) sending a certain packet based offset for the data in a packet to the smb_receive_trans2 function.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1965&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5345&w=2; http://secunia.com/advisories/13232/
CVE: CVE-2004-0890
Published: 2005-01-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reasons: This candidate is a reservation duplicate of another candidate.  Notes: All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2004-0893
Published: 2005-01-10
Description: The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the lengths of messages sent to the LPC port, which allows local users to gain privileges, aka "Windows Kernel Vulnerability."
CVSS Score: 7.2 (HIGH)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-044; https://exchange.xforce.ibmcloud.com/vulnerabilities/18339; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1321
CVE: CVE-2004-0894
Published: 2005-01-10
Description: LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly validate connection information, which allows local users to gain privileges via a specially-designed program.
CVSS Score: 7.2 (HIGH)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-044; https://exchange.xforce.ibmcloud.com/vulnerabilities/18340; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1888
CVE: CVE-2004-0899
Published: 2005-01-10
Description: The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service (application crash) via a malformed DHCP message, aka "Logging Vulnerability."
CVSS Score: 5.0 (MEDIUM)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-042; https://exchange.xforce.ibmcloud.com/vulnerabilities/18341; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2280
CVE: CVE-2004-0900
Published: 2005-01-10
Description: The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability."
CVSS Score: 10.0 (HIGH)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-042; https://exchange.xforce.ibmcloud.com/vulnerabilities/18342; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3577
CVE: CVE-2004-0901
Published: 2005-01-10
Description: Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different vulnerability than CVE-2004-0571.
CVSS Score: 10.0 (HIGH)
References: http://www.ciac.org/ciac/bulletins/p-055.shtml; http://www.idefense.com/application/poi/display?id=162&type=vulnerabilities&flashstatus=true; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-041
CVE: CVE-2004-0914
Published: 2005-01-10
Description: Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions.
CVSS Score: 10.0 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2004-537.html; http://secunia.com/advisories/13224/; http://www.debian.org/security/2004/dsa-607
CVE: CVE-2004-0915
Published: 2005-01-10
Description: Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hide_cvsroot and forbidden settings, which could allow remote attackers to gain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://www.debian.org/security/2004/dsa-605; https://exchange.xforce.ibmcloud.com/vulnerabilities/18369; http://www.debian.org/security/2004/dsa-605
CVE: CVE-2004-0946
Published: 2005-01-10
Description: rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request.
CVSS Score: 10.0 (HIGH)
References: http://bugs.gentoo.org/show_bug.cgi?id=72113; http://secunia.com/advisories/13440/; http://www.gentoo.org/security/en/glsa/glsa-200412-08.xml
CVE: CVE-2004-0949
Published: 2005-01-10
Description: The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or (2) raise a counter value to an arbitrary number by sending the first part of the fragmented packet multiple times.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1965&w=2; http://secunia.com/advisories/13232/; http://secunia.com/advisories/20162
CVE: CVE-2004-0953
Published: 2005-01-10
Description: Buffer overflow in the C2S module in the open source Jabber 2.x server (Jabberd) allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long username.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029346.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6709&w=2; http://www.securityfocus.com/bid/11741
CVE: CVE-2004-0956
Published: 2005-01-10
Description: MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.mysql.com/bug.php?id=3870; http://lists.mysql.com/packagers/202; http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml
CVE: CVE-2004-0987
Published: 2005-01-10
Description: Buffer overflow in the process_menu function in yardradius 1.0.20 allows remote attackers to execute arbitrary code.
CVSS Score: 10.0 (HIGH)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278384; http://www.debian.org/security/2004/dsa-598; http://www.securityfocus.com/bid/11753
CVE: CVE-2004-0993
Published: 2005-01-10
Description: Buffer overflow in hpsockd before 0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/13371/; http://www.debian.org/security/2004/dsa-604; http://www.securityfocus.com/bid/11800
CVE: CVE-2004-0994
Published: 2005-01-10
Description: Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c.  NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer.  Therefore, they should be regarded as distinct.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2077&w=2; http://rus.members.beeb.net/xzgv-0.8-integer-overflow-fix.diff; http://www.debian.org/security/2004/dsa-614
CVE: CVE-2004-0996
Published: 2005-01-10
Description: main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.
CVSS Score: 2.1 (LOW)
References: http://docs.info.apple.com/article.html?artnum=306172; http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9690&w=2
CVE: CVE-2004-1008
Published: 2005-01-10
Description: Integer signedness error in the ssh2_rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2_MSG_DEBUG packet with a modified stringlen parameter, which leads to a buffer overflow.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7613&w=2; http://secunia.com/advisories/12987/; http://secunia.com/advisories/13012/
CVE: CVE-2004-1011
Published: 2005-01-10
Description: Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015.
CVSS Score: 10.0 (HIGH)
References: http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=143; http://asg.web.cmu.edu/cyrus/download/imapd/changes.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1619&w=2
CVE: CVE-2004-1012
Published: 2005-01-10
Description: The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index increment error that leads to an out-of-bounds memory corruption.
CVSS Score: 10.0 (HIGH)
References: http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=143; http://asg.web.cmu.edu/cyrus/download/imapd/changes.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1619&w=2
CVE: CVE-2004-1013
Published: 2005-01-10
Description: The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an index increment error that leads to an out-of-bounds memory corruption.
CVSS Score: 10.0 (HIGH)
References: http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=143; http://asg.web.cmu.edu/cyrus/download/imapd/changes.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1619&w=2
CVE: CVE-2004-1014
Published: 2005-01-10
Description: statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.
CVSS Score: 5.0 (MEDIUM)
References: http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258&view=markup; http://www.debian.org/security/2004/dsa-606; http://www.redhat.com/support/errata/RHSA-2004-583.html
CVE: CVE-2004-1015
Published: 2005-01-10
Description: Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004-1011.
CVSS Score: 10.0 (HIGH)
References: http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=145; http://asg.web.cmu.edu/cyrus/download/imapd/changes.html; http://security.gentoo.org/glsa/glsa-200411-34.xml
CVE: CVE-2004-1016
Published: 2005-01-10
Description: The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users to cause a denial of service (system hang) via crafted auxiliary messages that are passed to the sendmsg function, which causes a deadlock condition.
CVSS Score: 2.1 (LOW)
References: http://isec.pl/vulnerabilities/isec-0019-scm.txt; http://secunia.com/advisories/20162; http://secunia.com/advisories/20163
CVE: CVE-2004-1018
Published: 2005-01-10
Description: Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via (1) a negative offset value to the shmop_write function, (2) an "integer overflow/underflow" in the pack function, or (3) an "integer overflow/underflow" in the unpack function.  NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute.  This candidate may change significantly in the future as a result of further discussion.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1298&w=2; http://www.hardened-php.net/advisories/012004.txt; http://www.mandriva.com/security/advisories?name=MDKSA-2004:151
CVE: CVE-2004-1019
Published: 2005-01-10
Description: The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html; http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1298&w=2
CVE: CVE-2004-1020
Published: 2005-01-10
Description: The addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may allow remote attackers to read arbitrary files in PHP applications that contain a directory traversal vulnerability in require or include statements, but are otherwise protected by the magic_quotes_gpc mechanism.  NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute.  This candidate may change significantly in the future as a result of further discussion.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000915; http://www.gentoo.org/security/en/glsa/glsa-200412-14.xml; http://www.mandriva.com/security/advisories?name=MDKSA-2004:151
CVE: CVE-2004-1022
Published: 2005-01-10
Description: Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7578&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/18470; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7578&w=2
CVE: CVE-2004-1023
Published: 2005-01-10
Description: Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windows based systems, do not modify the ACLs for critical files, which allows local users with Power Users privileges to modify programs, install malicious DLLs in the plug-ins folder, and modify XML files related to configuration.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3002&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/18471; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3002&w=2
CVE: CVE-2004-1025
Published: 2005-01-10
Description: Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.
CVSS Score: 10.0 (HIGH)
References: http://www.mandriva.com/security/advisories?name=MDKSA-2005:007; http://www.redhat.com/support/errata/RHSA-2004-651.html; http://www.securityfocus.com/bid/11830
CVE: CVE-2004-1026
Published: 2005-01-10
Description: Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.
CVSS Score: 10.0 (HIGH)
References: http://www.debian.org/security/2005/dsa-628; http://www.gentoo.org/security/en/glsa/glsa-200412-03.xml; http://www.mandriva.com/security/advisories?name=MDKSA-2005:007
CVE: CVE-2004-1028
Published: 2005-01-10
Description: Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious "grep" program, which is executed from chcod.
CVSS Score: 7.2 (HIGH)
References: http://www-1.ibm.com/support/search.wss?rs=0&q=IY64354&apar=only; http://www-1.ibm.com/support/search.wss?rs=0&q=IY64355&apar=only; http://www-1.ibm.com/support/search.wss?rs=0&q=IY64356&apar=only
CVE: CVE-2004-1054
Published: 2005-01-10
Description: Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privileges by modifying the PATH environment variable to point to a malicious "uname" program, which is executed from lsvpd after lsvpd has been invoked by invscout.
CVSS Score: 7.2 (HIGH)
References: http://www-1.ibm.com/support/search.wss?rs=0&q=IY64820&apar=only; http://www-1.ibm.com/support/search.wss?rs=0&q=IY64852&apar=only; http://www-1.ibm.com/support/search.wss?rs=0&q=IY64976&apar=only
CVE: CVE-2004-1056
Published: 2005-01-10
Description: Direct Rendering Manager (DRM) driver in Linux kernel 2.6 does not properly check the DMA lock, which could allow remote attackers or local users to cause a denial of service (X Server crash) and possibly modify the video output.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/17002; http://www.redhat.com/support/errata/RHSA-2005-092.html; http://www.redhat.com/support/errata/RHSA-2005-529.html
CVE: CVE-2004-1058
Published: 2005-01-10
Description: Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline.
CVSS Score: 1.2 (LOW)
References: ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U; http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html; http://secunia.com/advisories/18684
CVE: CVE-2004-1063
Published: 2005-01-10
Description: PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safe_mode_exec_dir restrictions and execute commands outside of the intended safe_mode_exec_dir via shell metacharacters in the current directory name.  NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute.  This candidate may change significantly in the future as a result of further discussion.
CVSS Score: 10.0 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000915; http://www.gentoo.org/security/en/glsa/glsa-200412-14.xml; http://www.hardened-php.net/advisories/012004.txt
CVE: CVE-2004-1064
Published: 2005-01-10
Description: The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attackers to bypass safe mode.  NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute.  This candidate may change significantly in the future as a result of further discussion.
CVSS Score: 10.0 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000915; http://www.gentoo.org/security/en/glsa/glsa-200412-14.xml; http://www.hardened-php.net/advisories/012004.txt
CVE: CVE-2004-1065
Published: 2005-01-10
Description: Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.
CVSS Score: 10.0 (HIGH)
References: http://msgs.securepoint.com/cgi-bin/get/bugtraq0412/157.html; http://www.mandriva.com/security/advisories?name=MDKSA-2004:151; http://www.novell.com/linux/security/advisories/2005_02_php4_mod_php4.html
CVE: CVE-2004-1066
Published: 2005-01-10
Description: The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a denial of service (panic) or read portions of kernel memory.  NOTE: this candidate might be SPLIT into 2 separate items in the future.
CVSS Score: 3.6 (LOW)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:17.procfs.asc; https://exchange.xforce.ibmcloud.com/vulnerabilities/18321; ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:17.procfs.asc