rainbutterfly/cve_corpus huggingface dataset:
CVE-2004-1037 
The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-19T05:00:00.000Z
CVE-2004-1038 
A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit.  NOTE: this was reported in 2008 to affect Windows Vista, but some Linux-based operating systems have protection mechanisms against this attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-16T05:00:00.000Z
CVE-2004-1039 
The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests, which causes inetd to launch a separate process for each request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-19T05:00:00.000Z
CVE-2004-1043 
Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript to be executed, as demonstrated using "writehta.txt" and the ADODB recordset, which saves a .HTA file to the local system, aka the "HTML Help ActiveX control Cross Domain Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-31T05:00:00.000Z
CVE-2004-1049 
Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-19T05:00:00.000Z
CVE-2004-1050 
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-18T05:00:00.000Z
CVE-2004-1051 
sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-18T05:00:00.000Z
CVE-2004-1052 
Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-18T05:00:00.000Z
CVE-2004-1053 
Integer overflow in fetch on FreeBSD 4.1 through 5.3 allows remote malicious servers to execute arbitrary code via certain HTTP headers in an HTTP response, which lead to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-24T05:00:00.000Z
CVE-2004-1054 
Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privileges by modifying the PATH environment variable to point to a malicious "uname" program, which is executed from lsvpd after lsvpd has been invoked by invscout.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-22T05:00:00.000Z
CVE-2004-1055 
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PmaAbsoluteUri parameter, (2) the zero_rows parameter in read_dump.php, (3) the confirm form, or (4) an error message generated by the internal phpMyAdmin parser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-24T05:00:00.000Z
CVE-2004-1056 
Direct Rendering Manager (DRM) driver in Linux kernel 2.6 does not properly check the DMA lock, which could allow remote attackers or local users to cause a denial of service (X Server crash) and possibly modify the video output.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-22T05:00:00.000Z
CVE-2004-1057 
Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VM_IO flag, which causes incorrect reference counts and may lead to a denial of service (kernel panic) when accessing freed kernel pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-29T05:00:00.000Z
CVE-2004-1058 
Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-22T05:00:00.000Z
CVE-2004-1059 
Multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) next and (2) prev result search pages, and the (3) extended and (4) simple search forms.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-31T05:00:00.000Z
CVE-2004-1060 
Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-13T04:00:00.000Z
CVE-2004-1061 
Cross-site scripting (XSS) vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11, allows remote attackers to inject arbitrary HTML and web script via forced error messages, as demonstrated using the action parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-31T05:00:00.000Z
CVE-2004-1062 
Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via certain error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-31T05:00:00.000Z
CVE-2004-1063 
PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safe_mode_exec_dir restrictions and execute commands outside of the intended safe_mode_exec_dir via shell metacharacters in the current directory name.  NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute.  This candidate may change significantly in the future as a result of further discussion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-08T05:00:00.000Z
CVE-2004-1064 
The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attackers to bypass safe mode.  NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute.  This candidate may change significantly in the future as a result of further discussion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-08T05:00:00.000Z
CVE-2004-1065 
Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-22T05:00:00.000Z
CVE-2004-1066 
The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a denial of service (panic) or read portions of kernel memory.  NOTE: this candidate might be SPLIT into 2 separate items in the future.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-05T05:00:00.000Z
CVE-2004-1067 
Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1068 
A "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1069 
Race condition in SELinux 2.6.x through 2.6.9 allows local users to cause a denial of service (kernel crash) via SOCK_SEQPACKET unix domain sockets, which are not properly handled in the sock_dgram_sendmsg function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1070 
The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1071 
The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an incorrect mapped image and may allow local users to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1072 
The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1073 
The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1074 
The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel oops) via a malformed a.out binary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1075 
Cross-site scripting (XSS) vulnerability in standard_error_message.dtml for Zwiki after 0.10.0rc1 to 0.36.2 allows remote attackers to inject arbitrary HTML and web script via a malformed URL, which is not properly cleansed when generating an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1076 
Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to execute arbitrary code via large values in the configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-08T05:00:00.000Z
CVE-2004-1077 
Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2004-1078 
Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName XML element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-26T04:00:00.000Z
CVE-2004-1079 
Buffer overflow in (1) ncplogin and (2) ncpmap in nwclient.c for ncpfs 2.2.4, and possibly other versions, may allow local users to gain privileges via a long -T option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1080 
The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1081 
The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly restrict access to a secure text input field, which allows local users to read keyboard input from other applications within the same window session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-14T04:00:00.000Z
CVE-2004-1082 
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-21T04:00:00.000Z
CVE-2004-1083 
Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attackers to read .DS_Store files and files beginning with ".ht" using alternate capitalization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-14T04:00:00.000Z
CVE-2004-1084 
Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names related to multiple data streams in HFS+, which bypass Apache file handles.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-14T04:00:00.000Z
CVE-2004-1085 
Human Interface Toolbox (HIToolBox) for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit key combination, even when the system is running in kiosk mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-14T04:00:00.000Z
CVE-2004-1086 
Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-14T04:00:00.000Z
CVE-2004-1087 
Terminal for Apple Mac OS X 10.3.6 may indicate that "Secure Keyboard Entry" is enabled even when it is not, which could result in a false sense of security for the user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-14T04:00:00.000Z
CVE-2004-1088 
Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-14T04:00:00.000Z
CVE-2004-1089 
Unknown vulnerability in Apple Mac OS X 10.3.6 server, when using Kerberos authentication and Cyrus IMAP allows local users to access mailboxes of other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-14T04:00:00.000Z
CVE-2004-1090 
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section header."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-22T05:00:00.000Z
CVE-2004-1091 
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by triggering a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-22T05:00:00.000Z
CVE-2004-1092 
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-22T05:00:00.000Z
CVE-2004-1093 
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-22T05:00:00.000Z
CVE-2004-1094 
Buffer overflow in InnerMedia DynaZip DUNZIP32.dll file version 5.00.03 and earlier allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, as demonstrated using (1) a .rjs (skin) file in RealPlayer 10 through RealPlayer 10.5 (6.0.12.1053), RealOne Player 1 and 2, (2) the Restore Backup function in CheckMark Software Payroll 2004/2005 3.9.6 and earlier, (3) CheckMark MultiLedger before 7.0.2, (4) dtSearch 6.x and 7.x, (5) mcupdmgr.exe and mghtml.exe in McAfee VirusScan 10 Build 10.0.21 and earlier, (6) IBM Lotus Notes before 6.5.5, and other products.  NOTE: it is unclear whether this is the same vulnerability as CVE-2004-0575, although the data manipulations are the same.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1095 
Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) readprf.c, (9) readtiff.c, (10) readxbm.c, (11) readxpm.c in zgv 5.8 allow remote attackers to execute arbitrary code via certain image headers that cause calculations to be overflowed and small buffers to be allocated, leading to buffer overflows.  NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer.  Therefore, they should be regarded as distinct.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1096 
Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1097 
Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in the URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1098 
MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the Content-Type header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1099 
Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.3.1, when the EAP-TLS protocol is enabled, does not properly handle expired or untrusted certificates, which allows remote attackers to bypass authentication and gain unauthorized access via a "cryptographically correct" certificate with valid fields such as the username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1100 
Cross-site scripting (XSS) vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to execute arbitrary web script or HTML via the append parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1101 
mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash), leak sensitive pathname information in the resulting error message, and execute a cross-site scripting (XSS) attack via an HTTP request that contains a / (backslash) and arbitrary webscript before the requested file, which leaks the pathname and does not quote the script in the resulting Visual Basic error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1102 
MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested file exists or not, which allows remote attackers to gain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1103 
MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to gain sensitive information via the debug parameter, which reveals information such as the path to the web root and the web server version.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1104 
Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor (a) element with an empty "href" attribute, and a FORM whose action points to a malicious URL, and an INPUT submit element that is modified to look like a legitimate URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1105 
Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z