rainbutterfly/cve_corpus huggingface dataset:
CVE-2004-0967 
The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-20T04:00:00.000Z
CVE-2004-0968 
The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-20T04:00:00.000Z
CVE-2004-0969 
The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-20T04:00:00.000Z
CVE-2004-0970 
The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files.  NOTE: the znew vulnerability may overlap CVE-2003-0367.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-20T04:00:00.000Z
CVE-2004-0971 
The krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-20T04:00:00.000Z
CVE-2004-0972 
The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-20T04:00:00.000Z
CVE-2004-0974 
The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-20T04:00:00.000Z
CVE-2004-0975 
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-20T04:00:00.000Z
CVE-2004-0976 
Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-20T04:00:00.000Z
CVE-2004-0977 
The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-20T04:00:00.000Z
CVE-2004-0978 
Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online gaming sites that are associated with MSN, allows remote attackers to execute arbitrary code via the SetupData parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-21T04:00:00.000Z
CVE-2004-0979 
Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operations that are inconsistent with the user's intended configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-21T04:00:00.000Z
CVE-2004-0980 
Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with certain service types in use, allows remote servers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-19T05:00:00.000Z
CVE-2004-0981 
Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-19T05:00:00.000Z
CVE-2004-0982 
Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ (at sign) in a URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-19T05:00:00.000Z
CVE-2004-0983 
The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-19T05:00:00.000Z
CVE-2004-0984 
Unknown vulnerability in the dotlock implementation in mailutils before 1:0.5-4 on Debian GNU/Linux allows attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-21T04:00:00.000Z
CVE-2004-0985 
Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable file type such as .xml, .doc, .py, .cdf, .css, .pdf, or .ppt, and using ADODB.Connection and ADODB.recordset to write to a .hta file that is interpreted in the Local Zone by HTML Help.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-26T04:00:00.000Z
CVE-2004-0986 
Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall rules to fail to load and protect the system from remote attackers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-19T05:00:00.000Z
CVE-2004-0987 
Buffer overflow in the process_menu function in yardradius 1.0.20 allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-05T05:00:00.000Z
CVE-2004-0988 
Integer overflow on Apple QuickTime before 6.5.2, when running on Windows systems, allows remote attackers to cause a denial of service (memory consumption) via certain inputs that cause a large memory operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-28T04:00:00.000Z
CVE-2004-0989 
Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-28T04:00:00.000Z
CVE-2004-0990 
Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-28T04:00:00.000Z
CVE-2004-0991 
Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-19T05:00:00.000Z
CVE-2004-0992 
Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-19T05:00:00.000Z
CVE-2004-0993 
Buffer overflow in hpsockd before 0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-0994 
Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c.  NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer.  Therefore, they should be regarded as distinct.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-15T05:00:00.000Z
CVE-2004-0996 
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-0997 
Unspecified vulnerability in the ptrace MIPS assembly code in Linux kernel 2.4 before 2.4.17 allows local users to gain privileges via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2004-0998 
Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-31T05:00:00.000Z
CVE-2004-0999 
zgv 5.5.3 allows remote attackers to cause a denial of service (application crash via segmentation fault) via crafted multiple-image (animated) GIF images.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-31T05:00:00.000Z
CVE-2004-1000 
lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-19T05:00:00.000Z
CVE-2004-1001 
Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pam_chauthtok function call is not properly handled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-04T05:00:00.000Z
CVE-2004-1002 
Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppd to access an incorrect memory location.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-04T05:00:00.000Z
CVE-2004-1003 
Trend ScanMail allows remote attackers to obtain potentially sensitive information or disable the anti-virus capability via the smency.nsf file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-04T05:00:00.000Z
CVE-2004-1004 
Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-22T05:00:00.000Z
CVE-2004-1005 
Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-22T05:00:00.000Z
CVE-2004-1006 
Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-19T05:00:00.000Z
CVE-2004-1007 
The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service (application crash) via mail headers that cause a line feed (LF) to be replaced by a null byte that is written to an incorrect memory address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-04T05:00:00.000Z
CVE-2004-1008 
Integer signedness error in the ssh2_rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2_MSG_DEBUG packet with a modified stringlen parameter, which leads to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1009 
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-22T05:00:00.000Z
CVE-2004-1010 
Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-09T05:00:00.000Z
CVE-2004-1011 
Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1012 
The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index increment error that leads to an out-of-bounds memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1013 
The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an index increment error that leads to an out-of-bounds memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1014 
statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-08T05:00:00.000Z
CVE-2004-1015 
Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004-1011.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1016 
The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users to cause a denial of service (system hang) via crafted auxiliary messages that are passed to the sendmsg function, which causes a deadlock condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-15T05:00:00.000Z
CVE-2004-1017 
Multiple "overflows" in the io_edgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-31T05:00:00.000Z
CVE-2004-1018 
Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via (1) a negative offset value to the shmop_write function, (2) an "integer overflow/underflow" in the pack function, or (3) an "integer overflow/underflow" in the unpack function.  NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute.  This candidate may change significantly in the future as a result of further discussion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-08T05:00:00.000Z
CVE-2004-1019 
The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-22T05:00:00.000Z
CVE-2004-1020 
The addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may allow remote attackers to read arbitrary files in PHP applications that contain a directory traversal vulnerability in require or include statements, but are otherwise protected by the magic_quotes_gpc mechanism.  NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute.  This candidate may change significantly in the future as a result of further discussion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-08T05:00:00.000Z
CVE-2004-1021 
iCal before 1.5.4 on Mac OS X 10.2.3, and other later versions, does not alert the user when handling calendars that use alarms, which allows attackers to execute programs and send e-mail via alarms.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-24T05:00:00.000Z
CVE-2004-1022 
Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-15T05:00:00.000Z
CVE-2004-1023 
Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windows based systems, do not modify the ACLs for critical files, which allows local users with Power Users privileges to modify programs, install malicious DLLs in the plug-ins folder, and modify XML files related to configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-15T05:00:00.000Z
CVE-2004-1025 
Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-15T05:00:00.000Z
CVE-2004-1026 
Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1027 
Directory traversal vulnerability in the -x (extract) command line option in unarj allows remote attackers to overwrite arbitrary files via an arj archive with filenames that contain .. (dot dot) sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-16T05:00:00.000Z
CVE-2004-1028 
Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious "grep" program, which is executed from chcod.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-22T05:00:00.000Z
CVE-2004-1029 
The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-24T05:00:00.000Z
CVE-2004-1030 
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file that can not be parsed in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-24T05:00:00.000Z
CVE-2004-1031 
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the fcronsighup configuration file to a /proc entry that is owned by root but modifiable by the user, such as /proc/self/cmdline or /proc/self/environ.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-24T05:00:00.000Z
CVE-2004-1032 
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty files via a target filename with a large number of leading slash (/) characters such that fcronsighup does not properly append the intended fcrontab.sig to the resulting string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-24T05:00:00.000Z
CVE-2004-1033 
Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-24T05:00:00.000Z
CVE-2004-1034 
Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-16T05:00:00.000Z
CVE-2004-1035 
Multiple integer signedness errors in (1) imapcommon.c, (2) main.c, (3) request.c, and (4) select.c for up-imapproxy IMAP proxy 1.2.2 allow remote attackers to cause a denial of service (server crash) and possibly leak sensitive information via certain literal values that are not properly handled when using the IMAP_Line_Read function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-16T05:00:00.000Z
CVE-2004-1036 
Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier, and 1.5.1-cvs before 23rd October 2004, allows remote attackers to execute arbitrary web script or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-11-16T05:00:00.000Z