rainbutterfly/cve_corpus huggingface dataset:
CVE-2004-0526 
Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-08T04:00:00.000Z
CVE-2004-0527 
KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-08T04:00:00.000Z
CVE-2004-0528 
Netscape Navigator 7.1 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-08T04:00:00.000Z
CVE-2004-0529 
The modified suexec program in cPanel, when configured for mod_php and compiled for Apache 1.3.31 and earlier without mod_phpsuexec, allows local users to execute untrusted shared scripts and gain privileges, as demonstrated using untainted scripts such as (1) proftpdvhosts or (2) addalink.cgi, a different vulnerability than CVE-2004-0490.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-08T04:00:00.000Z
CVE-2004-0530 
The PHP package in Slackware 8.1, 9.0, and 9.1, when linked against a static library, includes /tmp in the search path, which allows local users to execute arbitrary code as the PHP user by inserting shared libraries into the appropriate path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-08T04:00:00.000Z
CVE-2004-0533 
Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-14T04:00:00.000Z
CVE-2004-0534 
Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when uploading a document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-14T04:00:00.000Z
CVE-2004-0535 
The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory.  NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-08T04:00:00.000Z
CVE-2004-0536 
Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-08T04:00:00.000Z
CVE-2004-0537 
Opera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" (favicon) that is wider than expected, which could allow the web sites to spoof a trusted domain and facilitate phishing attacks using a wide icon and extra spaces.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-08T04:00:00.000Z
CVE-2004-0538 
LaunchServices in Mac OS X 10.3.4 and 10.2.8 automatically registers and executes new applications, which could allow attackers to execute arbitrary code without warning the user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-11T04:00:00.000Z
CVE-2004-0539 
The "Show in Finder" button in the Safari web browser in Mac OS X 10.3.4 and 10.2.8 may execute downloaded applications, which could allow remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-11T04:00:00.000Z
CVE-2004-0540 
Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is exactly 8 characters long, does not prevent users with expired passwords from logging on to the domain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-08T04:00:00.000Z
CVE-2004-0541 
Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-10T04:00:00.000Z
CVE-2004-0542 
PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arbitrary code, overwrite files, and access internal environment variables via (1) the "%", "|", or ">" characters to the escapeshellcmd function, or (2) the "%" character to the escapeshellarg function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-10T04:00:00.000Z
CVE-2004-0543 
Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-10T04:00:00.000Z
CVE-2004-0544 
Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-10T04:00:00.000Z
CVE-2004-0545 
LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-10T04:00:00.000Z
CVE-2004-0547 
Buffer overflow in the ODBC driver for PostgreSQL before 7.2.1 allows remote attackers to cause a denial of service (crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-11T04:00:00.000Z
CVE-2004-0548 
Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly handled when using the (1) "c" compress option or (2) "d" decompress option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-11T04:00:00.000Z
CVE-2004-0549 
The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript, as demonstrated using (1) delayed HTTP redirect operations, and an HTTP response with a Location: header containing a "URL:" prepended to a "ms-its" protocol URI, or (2) modifying the location attribute of the window, as exploited by the Download.ject (aka Scob aka Toofer) using the ADODB.Stream object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-15T04:00:00.000Z
CVE-2004-0550 
Buffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code via a URL with a large number of "." (period) characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-15T04:00:00.000Z
CVE-2004-0551 
Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and reload) by sending invalid packets instead of the final ACK portion of the three-way handshake to the (1) Telnet, (2) HTTP, or (3) SSH services, aka "TCP-ACK DoS attack."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-15T04:00:00.000Z
CVE-2004-0552 
Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-28T04:00:00.000Z
CVE-2004-0554 
Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-15T04:00:00.000Z
CVE-2004-0555 
Buffer overflow in (1) queue.c and (2) queued.c in queue before 1.30.1 may allow remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-29T05:00:00.000Z
CVE-2004-0557 
Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-08-02T04:00:00.000Z
CVE-2004-0558 
The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-17T04:00:00.000Z
CVE-2004-0559 
The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-24T04:00:00.000Z
CVE-2004-0560 
Integer overflow in gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted content of a certain size that triggers the overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-19T05:00:00.000Z
CVE-2004-0561 
Format string vulnerability in the log routine for gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-19T05:00:00.000Z
CVE-2004-0563 
The tspc.conf configuration file in freenet6 before 0.9.6 and before 1.0 on Debian Linux has world readable permissions, which could allow local users to gain sensitive information, such as a username and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-19T05:00:00.000Z
CVE-2004-0564 
Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files.  NOTE: the developer has publicly disputed the claim that this is a vulnerability because pppoe "is NOT designed to run setuid-root."  Therefore this identifier applies *only* to those configurations and installations under which pppoe is run setuid root despite the developer's warnings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-19T05:00:00.000Z
CVE-2004-0565 
Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-08T04:00:00.000Z
CVE-2004-0566 
Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-21T04:00:00.000Z
CVE-2004-0567 
The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute arbitrary code or cause a denial of service (server crash), which results in an "unchecked buffer" and possibly triggers a buffer overflow, aka the "Name Validation Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-31T05:00:00.000Z
CVE-2004-0568 
HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value that is saved in a session file, which allows remote attackers to execute arbitrary code via a malicious HyperTerminal session file (.ht), web site, or Telnet URL contained in an e-mail message, triggering a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-15T05:00:00.000Z
CVE-2004-0569 
The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of service (system crash) via a malicious message, possibly related to improper length values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-16T04:00:00.000Z
CVE-2004-0571 
Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Table Conversion Vulnerability," a different vulnerability than CVE-2004-0901.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-15T05:00:00.000Z
CVE-2004-0572 
Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL with a long filename and a .grp extension, which is not properly handled when the shell capability launches grpconv.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-16T04:00:00.000Z
CVE-2004-0573 
Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute arbitrary code via a malicious document or website.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-17T04:00:00.000Z
CVE-2004-0574 
The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-16T04:00:00.000Z
CVE-2004-0575 
Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper length validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-16T04:00:00.000Z
CVE-2004-0576 
The radius daemon (radiusd) for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service (server crash) via malformed SNMP messages containing an invalid OID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-30T04:00:00.000Z
CVE-2004-0577 
WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files from the root directory via a URL request to the wingate-internal directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-06T04:00:00.000Z
CVE-2004-0578 
WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files via leading slash (//) characters in a URL request to the wingate-internal directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-06T04:00:00.000Z
CVE-2004-0579 
Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-23T04:00:00.000Z
CVE-2004-0580 
DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-23T04:00:00.000Z
CVE-2004-0581 
ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-23T04:00:00.000Z
CVE-2004-0582 
Unknown vulnerability in Webmin 1.140 allows remote attackers to bypass access control rules and gain read access to configuration information for a module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-23T04:00:00.000Z
CVE-2004-0583 
The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-23T04:00:00.000Z
CVE-2004-0584 
Unknown vulnerability in Horde IMP 3.2.3 and earlier, before a "security fix," does not properly validate input, which allows remote attackers to execute arbitrary script as other users via script or HTML in an e-mail message, possibly triggering a cross-site scripting (XSS) vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-23T04:00:00.000Z
CVE-2004-0586 
acpRunner ActiveX 1.2.5.0 allows remote attackers to execute arbitrary code via the (1) DownLoadURL, (2) SaveFilePath, and (3) Download ActiveX methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-23T04:00:00.000Z
CVE-2004-0587 
Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-23T04:00:00.000Z
CVE-2004-0588 
Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and script via e-mail messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-23T04:00:00.000Z
CVE-2004-0589 
Cisco IOS 11.1(x) through 11.3(x) and 12.0(x) through 12.2(x), when configured for BGP routing, allows remote attackers to cause a denial of service (device reload) via malformed BGP (1) OPEN or (2) UPDATE messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-23T04:00:00.000Z
CVE-2004-0590 
FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS#7 certificates in which a self-signed certificate identifies an alternate Certificate Authority (CA) and spoofed issuer and subject.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-30T04:00:00.000Z
CVE-2004-0591 
Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script or HRML via (1) e-mail headers or (2) a message with a "message/delivery-status" MIME Content-Type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-24T04:00:00.000Z
CVE-2004-0592 
The tcp_find_option function of the netfilter subsystem for IPv6 in the SUSE Linux 2.6.5 kernel with USAGI patches, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a large option length that produces a negative integer after a casting operation to the char type, a similar flaw to CVE-2004-0626.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-23T20:00:00.000Z
CVE-2004-0593 
Sygate Enforcer 3.5MR1 and earlier passes broadcast traffic before authentication, which could allow remote attackers to bypass filtering rules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-08-18T04:00:00.000Z
CVE-2004-0594 
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-16T04:00:00.000Z
CVE-2004-0595 
The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-16T04:00:00.000Z
CVE-2004-0596 
The Equalizer Load-balancer for serial network interfaces (eql.c) in Linux kernel 2.6.x up to 2.6.7 allows local users to cause a denial of service via a non-existent device name that triggers a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-14T04:00:00.000Z
CVE-2004-0597 
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-08-05T04:00:00.000Z
CVE-2004-0598 
The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a certain PNG image that triggers a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-08-05T04:00:00.000Z