rainbutterfly/cve_corpus huggingface dataset:
CVE-2004-0370 
The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause a system panic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-06T04:00:00.000Z
CVE-2004-0371 
Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the cross-realm trust path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-06T04:00:00.000Z
CVE-2004-0372 
xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-27T05:00:00.000Z
CVE-2004-0374 
Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "__SQLUSER__" string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-06T04:00:00.000Z
CVE-2004-0375 
SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-05T04:00:00.000Z
CVE-2004-0376 
oftpd 0.3.6 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command with a large value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-06T04:00:00.000Z
CVE-2004-0377 
Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end in a backslash character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-06T04:00:00.000Z
CVE-2004-0379 
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary web content and steal cookies via certain server scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-07T04:00:00.000Z
CVE-2004-0380 
The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the "MHTML URL Processing Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-06T04:00:00.000Z
CVE-2004-0381 
mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-06T04:00:00.000Z
CVE-2004-0382 
Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly related to a configuration file setting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-07T04:00:00.000Z
CVE-2004-0383 
Unknown vulnerability in Mail for Mac OS X 10.3.3 and 10.2.8, with unknown impact, related to "the handling of HTML-formatted email."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-07T04:00:00.000Z
CVE-2004-0385 
Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener.  NOTE: due to the vagueness of the Oracle advisory, it is not clear whether there are additional issues besides this overflow, although the advisory alludes to multiple "vulnerabilities."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-16T04:00:00.000Z
CVE-2004-0386 
Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-07T04:00:00.000Z
CVE-2004-0387 
Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allows remote attackers to execute arbitrary code via a malformed .R3T file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-16T04:00:00.000Z
CVE-2004-0388 
The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-16T04:00:00.000Z
CVE-2004-0389 
RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GET_PARAMETER or (2) DESCRIBE requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-17T04:00:00.000Z
CVE-2004-0390 
SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthorized access to an X session via other X login methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-14T04:00:00.000Z
CVE-2004-0391 
Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7 through 1.7.3 have a hardcoded username and password, which allows remote attackers to add new users, modify existing users, and change configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-16T04:00:00.000Z
CVE-2004-0392 
racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-06T04:00:00.000Z
CVE-2004-0393 
Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved, which is provided to the syslog function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-30T04:00:00.000Z
CVE-2004-0394 
A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-05T04:00:00.000Z
CVE-2004-0395 
The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users to execute arbitrary commands via shell metacharacters in a system call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-08T04:00:00.000Z
CVE-2004-0396 
Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-20T04:00:00.000Z
CVE-2004-0397 
Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a (1) DAV2 REPORT query or (2) get-dated-rev svn-protocol command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-28T04:00:00.000Z
CVE-2004-0398 
Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-20T04:00:00.000Z
CVE-2004-0399 
Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-12T04:00:00.000Z
CVE-2004-0400 
Stack-based buffer overflow in Exim 4 before 4.33, when the headers_check_syntax option is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code during the header check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-12T04:00:00.000Z
CVE-2004-0401 
Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-14T04:00:00.000Z
CVE-2004-0402 
Buffer overflow in xpcd-svga in xpcd before 2.08, and possibly other versions, may allow local users to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-28T04:00:00.000Z
CVE-2004-0403 
Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-16T04:00:00.000Z
CVE-2004-0404 
logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-20T04:00:00.000Z
CVE-2004-0405 
CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-17T04:00:00.000Z
CVE-2004-0407 
The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-17T04:00:00.000Z
CVE-2004-0408 
Buffer overflow in the child_service function in the ident2 ident daemon allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-08-19T04:00:00.000Z
CVE-2004-0409 
Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-17T04:00:00.000Z
CVE-2004-0411 
The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which allows remote attackers to manipulate the options that are passed to the associated programs, possibly to read arbitrary files or execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-20T04:00:00.000Z
CVE-2004-0412 
Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0413 
libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL strings, which allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via an integer overflow that leads to a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-23T04:00:00.000Z
CVE-2004-0414 
CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-11T04:00:00.000Z
CVE-2004-0415 
Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portions of kernel memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-08-05T04:00:00.000Z
CVE-2004-0416 
Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-11T04:00:00.000Z
CVE-2004-0417 
Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-11T04:00:00.000Z
CVE-2004-0418 
serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-11T04:00:00.000Z
CVE-2004-0419 
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0420 
The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-20T04:00:00.000Z
CVE-2004-0421 
The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-05T04:00:00.000Z
CVE-2004-0422 
flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-06T04:00:00.000Z
CVE-2004-0423 
The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-20T04:00:00.000Z
CVE-2004-0424 
Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-30T04:00:00.000Z
CVE-2004-0425 
Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-05T04:00:00.000Z
CVE-2004-0426 
rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-30T04:00:00.000Z
CVE-2004-0427 
The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-30T04:00:00.000Z
CVE-2004-0428 
Unknown vulnerability in CoreFoundation in Mac OS X 10.3.3 and Mac OS X 10.3.3 Server, related to "the handling of an environment variable," has unknown attack vectors and unknown impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-02T05:00:00.000Z
CVE-2004-0429 
Unknown vulnerability related to "the handling of large requests" in RAdmin for Apple Mac OS X 10.3.3 and Mac OS X 10.2.8 may allow attackers to have unknown impact via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-02T05:00:00.000Z
CVE-2004-0430 
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string that is longer than the associated length field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-06T04:00:00.000Z
CVE-2004-0431 
Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-06T04:00:00.000Z
CVE-2004-0432 
ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-05T04:00:00.000Z
CVE-2004-0433 
Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP (realrtsp) streams, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (a) long URLs, (b) long Real server responses, or (c) long Real Data Transport (RDT) packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-05T04:00:00.000Z
CVE-2004-0434 
k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leads to a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-12T04:00:00.000Z
CVE-2004-0435 
Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not properly handle the MS_INVALIDATE operation, which leads to cache consistency problems that allow a local user to prevent certain changes to files from being committed to disk.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0437 
Titan FTP Server version 3.01 build 163, and possibly other versions before build 169, allows remote authenticated users to cause a denial of service (crash) by disconnecting from the system during a "LIST -L" command, which causes Titan to access an invalid socket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-06T04:00:00.000Z
CVE-2004-0444 
Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allow remote attackers to cause a denial of service or execute arbitrary code via (1) a manipulated length byte in the first-level decoding routine for NetBIOS Name Service (NBNS) that modifies an index variable and leads to a stack-based buffer overflow, (2) a heap-based corruption problem in an NBNS response that is missing certain RR fields, and (3) a stack-based buffer overflow in the DNS component via a Resource Record (RR) with a long canonical name (CNAME) field composed of many smaller components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-20T04:00:00.000Z
CVE-2004-0445 
The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-20T04:00:00.000Z
CVE-2004-0447 
Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact.  NOTE: due to a typo, this issue was accidentally assigned CVE-2004-0477.  This is the proper candidate to use for the Linux local DoS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-09T04:00:00.000Z
CVE-2004-0448 
Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-08T04:00:00.000Z
CVE-2004-0450 
Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by log2mail.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-08T04:00:00.000Z
CVE-2004-0451 
Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-30T04:00:00.000Z