deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2004-1067
Published: 2005-01-10
Description: Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.
CVSS Score: 10.0 (HIGH)
References: http://asg.web.cmu.edu/cyrus/download/imapd/changes.html; http://www.securityfocus.com/bid/11738; https://exchange.xforce.ibmcloud.com/vulnerabilities/18333
CVE: CVE-2004-1068
Published: 2005-01-10
Description: A "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition.
CVSS Score: 6.2 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0336&w=2; http://secunia.com/advisories/19607
CVE: CVE-2004-1069
Published: 2005-01-10
Description: Race condition in SELinux 2.6.x through 2.6.9 allows local users to cause a denial of service (kernel crash) via SOCK_SEQPACKET unix domain sockets, which are not properly handled in the sock_dgram_sendmsg function.
CVSS Score: 1.2 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0336&w=2; http://marc.info/?l=linux-kernel&m=[PII_REDACTED]4761; http://www.mandriva.com/security/advisories?name=MDKSA-2005:022
CVE: CVE-2004-1070
Published: 2005-01-10
Description: The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.
CVSS Score: 7.2 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U; http://secunia.com/advisories/19607; http://secunia.com/advisories/20162
CVE: CVE-2004-1071
Published: 2005-01-10
Description: The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an incorrect mapped image and may allow local users to execute arbitrary code.
CVSS Score: 7.2 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U; http://secunia.com/advisories/19607; http://secunia.com/advisories/20162
CVE: CVE-2004-1072
Published: 2005-01-10
Description: The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code.
CVSS Score: 7.2 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U; http://secunia.com/advisories/19607; http://secunia.com/advisories/20162
CVE: CVE-2004-1073
Published: 2005-01-10
Description: The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/18684; http://secunia.com/advisories/20162; http://secunia.com/advisories/20163
CVE: CVE-2004-1074
Published: 2005-01-10
Description: The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel oops) via a malformed a.out binary.
CVSS Score: 2.1 (LOW)
References: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8807&w=2; http://marc.info/?l=linux-kernel&m=[PII_REDACTED]7372&w=2
CVE: CVE-2004-1075
Published: 2005-01-10
Description: Cross-site scripting (XSS) vulnerability in standard_error_message.dtml for Zwiki after 0.10.0rc1 to 0.36.2 allows remote attackers to inject arbitrary HTML and web script via a malformed URL, which is not properly cleansed when generating an error message.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2036&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9761&w=2; http://www.gentoo.org/security/en/glsa/glsa-200412-23.xml
CVE: CVE-2004-1076
Published: 2005-01-10
Description: Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to execute arbitrary code via large values in the configuration file.
CVSS Score: 7.2 (HIGH)
References: http://cvs.sourceforge.net/viewcvs.py/atari800/atari800/DOC/ChangeLog?view=markup; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9841&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5270&w=2
CVE: CVE-2004-1079
Published: 2005-01-10
Description: Buffer overflow in (1) ncplogin and (2) ncpmap in nwclient.c for ncpfs 2.2.4, and possibly other versions, may allow local users to gain privileges via a long -T option.
CVSS Score: 7.2 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029563.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7437&w=2; http://www.gentoo.org/security/en/glsa/glsa-200412-09.xml
CVE: CVE-2004-1080
Published: 2005-01-10
Description: The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6704&w=2; http://secunia.com/advisories/13328/; http://securitytracker.com/id?1012516
CVE: CVE-2004-1094
Published: 2005-01-10
Description: Buffer overflow in InnerMedia DynaZip DUNZIP32.dll file version 5.00.03 and earlier allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, as demonstrated using (1) a .rjs (skin) file in RealPlayer 10 through RealPlayer 10.5 (6.0.12.1053), RealOne Player 1 and 2, (2) the Restore Backup function in CheckMark Software Payroll 2004/2005 3.9.6 and earlier, (3) CheckMark MultiLedger before 7.0.2, (4) dtSearch 6.x and 7.x, (5) mcupdmgr.exe and mghtml.exe in McAfee VirusScan 10 Build 10.0.21 and earlier, (6) IBM Lotus Notes before 6.5.5, and other products.  NOTE: it is unclear whether this is the same vulnerability as CVE-2004-0575, although the data manipulations are the same.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/1044.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7607&w=2; http://secunia.com/advisories/17096
CVE: CVE-2004-1095
Published: 2005-01-10
Description: Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) readprf.c, (9) readtiff.c, (10) readxbm.c, (11) readxpm.c in zgv 5.8 allow remote attackers to execute arbitrary code via certain image headers that cause calculations to be overflowed and small buffers to be allocated, leading to buffer overflows.  NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer.  Therefore, they should be regarded as distinct.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2781&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5661&w=2; http://www.gentoo.org/security/en/glsa/glsa-200411-12.xml
CVE: CVE-2004-1096
Published: 2005-01-10
Description: Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/13038/; http://www.gentoo.org/security/en/glsa/glsa-200410-31.xml; http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true
CVE: CVE-2004-1097
Published: 2005-01-10
Description: Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in the URL.
CVSS Score: 10.0 (HIGH)
References: http://bugs.gentoo.org/show_bug.cgi?id=67667; http://www.gentoo.org/security/en/glsa/glsa-200411-02.xml; http://www.securityfocus.com/bid/11574
CVE: CVE-2004-1098
Published: 2005-01-10
Description: MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the Content-Type header.
CVSS Score: 7.5 (HIGH)
References: http://lists.roaringpenguin.com/pipermail/mimedefang/2004-October/024959.html; http://www.gentoo.org/security/en/glsa/glsa-200411-06.xml; http://www.mandriva.com/security/advisories?name=MDKSA-2004:123
CVE: CVE-2004-1099
Published: 2005-01-10
Description: Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.3.1, when the EAP-TLS protocol is enabled, does not properly handle expired or untrusted certificates, which allows remote attackers to bypass authentication and gain unauthorized access via a "cryptographically correct" certificate with valid fields such as the username.
CVSS Score: 10.0 (HIGH)
References: http://www.ciac.org/ciac/bulletins/p-028.shtml; http://www.cisco.com/warp/public/707/cisco-sa-20041102-acs-eap-tls.shtml; http://www.securityfocus.com/bid/11577
CVE: CVE-2004-1100
Published: 2005-01-10
Description: Cross-site scripting (XSS) vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to execute arbitrary web script or HTML via the append parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/107998; http://www.procheckup.com/security_info/vuln_pr0410.html; http://www.securityfocus.com/bid/11596
CVE: CVE-2004-1101
Published: 2005-01-10
Description: mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash), leak sensitive pathname information in the resulting error message, and execute a cross-site scripting (XSS) attack via an HTTP request that contains a / (backslash) and arbitrary webscript before the requested file, which leaks the pathname and does not quote the script in the resulting Visual Basic error message.
CVSS Score: 5.8 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/596046; http://www.procheckup.com/security_info/vuln_pr0411.html; http://www.securityfocus.com/bid/11598
CVE: CVE-2004-1102
Published: 2005-01-10
Description: MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested file exists or not, which allows remote attackers to gain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/306086; http://www.procheckup.com/security_info/vuln_pr0408.html; http://www.securityfocus.com/bid/11599
CVE: CVE-2004-1103
Published: 2005-01-10
Description: MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to gain sensitive information via the debug parameter, which reveals information such as the path to the web root and the web server version.
CVSS Score: 5.0 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/858726; http://www.procheckup.com/security_info/vuln_pr0409.html; http://www.securityfocus.com/bid/11595
CVE: CVE-2004-1105
Published: 2005-01-10
Description: Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0291.html; http://www.kb.cert.org/vuls/id/830214; http://www.kb.cert.org/vuls/id/CRDY-626N7F
CVE: CVE-2004-1106
Published: 2005-01-10
Description: Cross-site scripting (XSS) vulnerability in Gallery 1.4.4-pl3 and earlier allows remote attackers to execute arbitrary web script or HTML via "specially formed URLs," possibly via the include parameter in index.php.
CVSS Score: 6.8 (MEDIUM)
References: http://g3cko.info/gallery2-4.patch; http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=142&mode=thread&order=0&thold=0; http://www.debian.org/security/2005/dsa-642
CVE: CVE-2004-1107
Published: 2005-01-10
Description: dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS Score: 2.1 (LOW)
References: http://bugs.gentoo.org/show_bug.cgi?id=69147; http://secunia.com/advisories/13108/; http://www.gentoo.org/security/en/glsa/glsa-200411-13.xml
CVE: CVE-2004-1108
Published: 2005-01-10
Description: qpkg in Gentoolkit 0.2.0_pre10 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary directory.
CVSS Score: 2.1 (LOW)
References: http://bugs.gentoo.org/show_bug.cgi?id=68846; http://secunia.com/advisories/13108/; http://www.gentoo.org/security/en/glsa/glsa-200411-13.xml
CVE: CVE-2004-1109
Published: 2005-01-10
Description: The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service (CPU consumption and system freeze from infinite loop) via a (1) TCP, (2) UDP, or (3) ICMP packet with a zero length IP Option field.
CVSS Score: 5.0 (MEDIUM)
References: http://www.eeye.com/html/research/advisories/AD20041109.html; http://www.kerio.com/security_advisory.html; http://www.securityfocus.com/bid/11639
CVE: CVE-2004-1110
Published: 2005-01-10
Description: The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink attack on the epson temporary file.
CVSS Score: 2.1 (LOW)
References: http://bugs.gentoo.org/show_bug.cgi?id=70310; http://www.gentoo.org/security/en/glsa/glsa-200411-17.xml; http://www.securityfocus.com/bid/11640
CVE: CVE-2004-1111
Published: 2005-01-10
Description: Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size.
CVSS Score: 5.0 (MEDIUM)
References: http://www.ciac.org/ciac/bulletins/p-034.shtml; http://www.cisco.com/warp/public/707/cisco-sa-20041110-dhcp.shtml; http://www.kb.cert.org/vuls/id/630104
CVE: CVE-2004-1112
Published: 2005-01-10
Description: The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks within the five minute timeout period.
CVSS Score: 5.1 (MEDIUM)
References: http://www.ciac.org/ciac/bulletins/p-036.shtml; http://www.cisco.com/warp/public/707/cisco-sa-20041111-csa.shtml; http://www.securityfocus.com/bid/11659
CVE: CVE-2004-1113
Published: 2005-01-10
Description: SQL injection vulnerability in SQLgrey Postfix greylisting service before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) sender or (2) recipient e-mail addresses.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/13135/; http://sourceforge.net/project/shownotes.php?release_id=281256; http://www.securityfocus.com/bid/11633
CVE: CVE-2004-1114
Published: 2005-01-10
Description: Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username, a different vulnerability than CVE-2004-1777.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028852.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6017&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2696&w=2
CVE: CVE-2004-1115
Published: 2005-01-10
Description: The init scripts in Search for Extraterrestrial Intelligence (SETI) project 3.08-r3 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs.
CVSS Score: 7.2 (HIGH)
References: http://www.gentoo.org/security/en/glsa/glsa-200411-26.xml; https://exchange.xforce.ibmcloud.com/vulnerabilities/18149; http://www.gentoo.org/security/en/glsa/glsa-200411-26.xml
CVE: CVE-2004-1116
Published: 2005-01-10
Description: The init scripts in Great Internet Mersenne Prime Search (GIMPS) 23.9 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs.
CVSS Score: 7.2 (HIGH)
References: http://www.gentoo.org/security/en/glsa/glsa-200411-26.xml; https://exchange.xforce.ibmcloud.com/vulnerabilities/18149; http://www.gentoo.org/security/en/glsa/glsa-200411-26.xml
CVE: CVE-2004-1117
Published: 2005-01-10
Description: The init scripts in ChessBrain 20407 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs.
CVSS Score: 7.2 (HIGH)
References: http://www.gentoo.org/security/en/glsa/glsa-200411-26.xml; https://exchange.xforce.ibmcloud.com/vulnerabilities/18149; http://www.gentoo.org/security/en/glsa/glsa-200411-26.xml
CVE: CVE-2004-1118
Published: 2005-01-10
Description: Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029243.html; http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029244.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3417&w=2
CVE: CVE-2004-1119
Published: 2005-01-10
Description: Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2004-11/0369.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4482&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0803&w=2
CVE: CVE-2004-1120
Published: 2005-01-10
Description: Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and earlier allow remote servers to execute arbitrary code via a long Location header.
CVSS Score: 10.0 (HIGH)
References: http://bugs.gentoo.org/show_bug.cgi?id=70090; http://www.debian.org/security/2005/dsa-663; http://www.gentoo.org/security/en/glsa/glsa-200411-31.xml
CVE: CVE-2004-1122
Published: 2005-01-10
Description: Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows, aka the "Dialog Box Spoofing Vulnerability," a different vulnerability than CVE-2004-1314.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html; http://secunia.com/advisories/12892; http://secunia.com/multiple_browsers_dialog_box_spoofing_test/
CVE: CVE-2004-1123
Published: 2005-01-10
Description: Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a DESCRIBE request with a location that contains a null byte.
CVSS Score: 5.0 (MEDIUM)
References: http://www.idefense.com/application/poi/display?id=159&type=vulnerabilities; https://exchange.xforce.ibmcloud.com/vulnerabilities/18357; http://www.idefense.com/application/poi/display?id=159&type=vulnerabilities
CVE: CVE-2004-1125
Published: 2005-01-10
Description: Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.00pl2.patch; ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.42/SCOSA-2005.42.txt; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000921
CVE: CVE-2004-1127
Published: 2005-01-10
Description: Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code via a long RedirectAll command.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029383.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1674&w=2; http://www.gentoo.org/security/en/glsa/glsa-200411-37.xml
CVE: CVE-2004-1128
Published: 2005-01-10
Description: Buffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary code via an attachment with a long filename.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9955&w=2; http://www.security.org.sg/vuln/cmailserver52.html; http://www.securityfocus.com/bid/11742
CVE: CVE-2004-1129
Published: 2005-01-10
Description: SQL injection vulnerability in (1) fdelmail.asp, (2) addressc.asp, and possibly (3) postmail.asp and (4) fmvmail.asp in CMailServer 5.2 allow remote attackers to inject arbitrary SQL commands and delete mail metadata or e-mail addresses of contacts via the indexOfMail parameter.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9955&w=2; http://www.security.org.sg/vuln/cmailserver52.html; http://www.securityfocus.com/bid/11742
CVE: CVE-2004-1130
Published: 2005-01-10
Description: Cross-site scripting (XSS) vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute arbitrary web script or HTML via personal information fields, such as (1) username, (2) name, or (3) comments.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9955&w=2; http://www.security.org.sg/vuln/cmailserver52.html; http://www.securityfocus.com/bid/11742
CVE: CVE-2004-1133
Published: 2005-01-10
Description: Multiple cross-site scripting (XSS) vulnerabilities in Microsoft W3Who ISAPI (w3who.dll) allow remote attackers to inject arbitrary HTML and web script via (1) HTTP headers such as "Connection" or (2) invalid parameters whose values are echoed in the resulting error message.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]3233&w=2; http://www.exaprobe.com/labs/advisories/esa-2004-1206.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/18375
CVE: CVE-2004-1134
Published: 2005-01-10
Description: Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long query string.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]3233&w=2; http://www.exaprobe.com/labs/advisories/esa-2004-1206.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/18377
CVE: CVE-2004-1135
Published: 2005-01-10
Description: Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1) SITE, (2) XMKD, (3) MKD, and (4) RNFR commands.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029600.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4819&w=2; http://www.securiteam.com/exploits/6D00L2KBPG.html