rainbutterfly/cve_corpus huggingface dataset:
CVE-2004-0153 
Multiple format string vulnerabilities in emil 2.1.0 and earlier may allow remote attackers to execute arbitrary code by triggering certain error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-27T05:00:00.000Z
CVE-2004-0154 
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-12T04:00:00.000Z
CVE-2004-0155 
The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-16T04:00:00.000Z
CVE-2004-0156 
Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before 2.50.6 allow remote mail relays to cause a denial of service and possibly execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-17T04:00:00.000Z
CVE-2004-0157 
x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a malicious rmail program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-17T04:00:00.000Z
CVE-2004-0158 
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2) theme.c, (3) manager.c, (4) config.c, (5) game.c, (6) levels.c, or (7) main.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-10T05:00:00.000Z
CVE-2004-0159 
Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via file names containing format string characters that are not properly handled when executing an "ls" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2004-0160 
Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2004-0161 
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFC2231 encoding, which may be interpreted differently by mail clients.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-24T04:00:00.000Z
CVE-2004-0162 
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that uses RFC822 comment fields, which may be interpreted as other fields by mail clients.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-24T04:00:00.000Z
CVE-2004-0163 
Sygate Secure Enterprise (SSE) 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote attackers to cause a denial of service (resource exhaustion) by capturing a session and repeatedly replaying the session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-08-18T04:00:00.000Z
CVE-2004-0164 
KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp_inf.c, or (2) a certain INITIAL-CONTACT message that is not properly handled in isakmp_inf.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-02-19T05:00:00.000Z
CVE-2004-0165 
Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to read arbitrary pppd process data, including PAP or CHAP authentication credentials, to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2004-0166 
Unknown vulnerability in Safari web browser for Mac OS X 10.2.8 related to "the display of URLs in the status bar."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-04T05:00:00.000Z
CVE-2004-0167 
DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not properly initialize writeable removable media.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2004-0168 
Unknown vulnerability in CoreFoundation for Mac OS X 10.3.2, related to "notification logging."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-04T05:00:00.000Z
CVE-2004-0169 
QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) via DESCRIBE requests with long User-Agent fields, which causes an Assert error to be triggered in the BufferIsFull function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2004-0171 
FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and system crash) via a large number of out-of-sequence TCP packets, which prevents the operating system from creating new connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2004-0172 
Heap-based buffer overflow in the search_for_command function of ltrace 0.3.10, if it is installed setuid, could allow local users to execute arbitrary code via a long filename.  NOTE: It is unclear whether there are any packages that install ltrace as a setuid program, so this candidate might be REJECTed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-02-23T05:00:00.000Z
CVE-2004-0173 
Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attackers to read arbitrary files via a URL containing "..%5C" (dot dot encoded backslash) sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2004-0174 
Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service (blocked new connections) via a "short-lived connection on a rarely-accessed listening socket."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-25T05:00:00.000Z
CVE-2004-0175 
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files.  NOTE: this may be a rediscovery of CVE-2000-0992.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0176 
Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-25T05:00:00.000Z
CVE-2004-0177 
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-16T04:00:00.000Z
CVE-2004-0178 
The OSS code for the Sound Blaster (sb16) driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not properly handle certain sample sizes, which allows local users to cause a denial of service (crash) via a sample with an odd number of bytes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-16T04:00:00.000Z
CVE-2004-0179 
Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-16T04:00:00.000Z
CVE-2004-0180 
The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-16T04:00:00.000Z
CVE-2004-0181 
The JFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the JFS file system, which allows local users to obtain sensitive information by reading the raw device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-17T04:00:00.000Z
CVE-2004-0182 
Mailman before 2.0.13 allows remote attackers to cause a denial of service (crash) via an email message with an empty subject field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-17T04:00:00.000Z
CVE-2004-0183 
TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-06T04:00:00.000Z
CVE-2004-0184 
Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-06T04:00:00.000Z
CVE-2004-0185 
Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2004-0186 
smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2004-0188 
Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to execute arbitrary code via a long password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2004-0189 
The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00") character, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2004-0190 
Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator's local system or in a proxy, which allows attackers to steal the password and gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2004-0191 
Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2004-0192 
Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookies and hijack a management session via a /sgmi URL that contains malicious script, which is not quoted in the resulting error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-04T05:00:00.000Z
CVE-2004-0193 
Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2004-0194 
Stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows remote attackers to execute arbitrary code via a PDF document with XML Forms Data Format (XFDF) data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2004-0197 
Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-16T04:00:00.000Z
CVE-2004-0199 
Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-14T04:00:00.000Z
CVE-2004-0200 
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-17T04:00:00.000Z
CVE-2004-0201 
Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-14T04:00:00.000Z
CVE-2004-0202 
IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-11T04:00:00.000Z
CVE-2004-0203 
Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-08-12T04:00:00.000Z
CVE-2004-0204 
Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via ".." sequences in the dynamicimag argument to crystalimagehandler.aspx.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-11T04:00:00.000Z
CVE-2004-0205 
Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the redirect function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-14T04:00:00.000Z
CVE-2004-0206 
Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-16T04:00:00.000Z
CVE-2004-0207 
"Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs using the SetWindowLong and SetWIndowLongPtr API functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-16T04:00:00.000Z
CVE-2004-0208 
The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-16T04:00:00.000Z
CVE-2004-0209 
Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an unchecked buffer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-16T04:00:00.000Z
CVE-2004-0210 
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-14T04:00:00.000Z
CVE-2004-0211 
The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local users to cause a denial of service (system crash) via a malicious program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-16T04:00:00.000Z
CVE-2004-0212 
Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an anonymous share.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-14T04:00:00.000Z
CVE-2004-0213 
Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that sends a Windows message to cause Utility Manager to launch winhlp32 by directly accessing the context sensitive help and bypassing the GUI, then sending another message to winhlp32 in order to open a user-selected file, a different vulnerability than CVE-2003-0908.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-14T04:00:00.000Z
CVE-2004-0214 
Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-16T04:00:00.000Z
CVE-2004-0215 
Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-14T04:00:00.000Z
CVE-2004-0216 
Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, which triggers the integer overflow when calculating a buffer length and leads to a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-16T04:00:00.000Z
CVE-2004-0217 
The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-16T05:00:00.000Z
CVE-2004-0218 
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (infinite loop) via an ISAKMP packet with a zero-length payload, as demonstrated by the Striker ISAKMP Protocol Test Suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-25T05:00:00.000Z
CVE-2004-0219 
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a malformed IPSEC SA payload, as demonstrated by the Striker ISAKMP Protocol Test Suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-25T05:00:00.000Z
CVE-2004-0220 
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a malformed Cert Request payload, which causes an integer underflow that is used in a malloc operation that is not properly handled, as demonstrated by the Striker ISAKMP Protocol Test Suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-25T05:00:00.000Z
CVE-2004-0221 
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as demonstrated by the Striker ISAKMP Protocol Test Suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-25T05:00:00.000Z
CVE-2004-0222 
Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via certain ISAKMP packets, as demonstrated by the Striker ISAKMP Protocol Test Suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-25T05:00:00.000Z