rainbutterfly/cve_corpus huggingface dataset:
CVE-2004-1106 
Cross-site scripting (XSS) vulnerability in Gallery 1.4.4-pl3 and earlier allows remote attackers to execute arbitrary web script or HTML via "specially formed URLs," possibly via the include parameter in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1107 
dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1108 
qpkg in Gentoolkit 0.2.0_pre10 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1109 
The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service (CPU consumption and system freeze from infinite loop) via a (1) TCP, (2) UDP, or (3) ICMP packet with a zero length IP Option field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1110 
The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink attack on the epson temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1111 
Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1112 
The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks within the five minute timeout period.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1113 
SQL injection vulnerability in SQLgrey Postfix greylisting service before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) sender or (2) recipient e-mail addresses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1114 
Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username, a different vulnerability than CVE-2004-1777.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1115 
The init scripts in Search for Extraterrestrial Intelligence (SETI) project 3.08-r3 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1116 
The init scripts in Great Internet Mersenne Prime Search (GIMPS) 23.9 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1117 
The init scripts in ChessBrain 20407 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1118 
Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1119 
Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1120 
Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and earlier allow remote servers to execute arbitrary code via a long Location header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-01T05:00:00.000Z
CVE-2004-1121 
Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-14T04:00:00.000Z
CVE-2004-1122 
Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows, aka the "Dialog Box Spoofing Vulnerability," a different vulnerability than CVE-2004-1314.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1123 
Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a DESCRIBE request with a location that contains a null byte.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-05T05:00:00.000Z
CVE-2004-1124 
Unknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape the chroot jail and conduct unauthorized activities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-29T05:00:00.000Z
CVE-2004-1125 
Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-22T05:00:00.000Z
CVE-2004-1127 
Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code via a long RedirectAll command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-05T05:00:00.000Z
CVE-2004-1128 
Buffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary code via an attachment with a long filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-05T05:00:00.000Z
CVE-2004-1129 
SQL injection vulnerability in (1) fdelmail.asp, (2) addressc.asp, and possibly (3) postmail.asp and (4) fmvmail.asp in CMailServer 5.2 allow remote attackers to inject arbitrary SQL commands and delete mail metadata or e-mail addresses of contacts via the indexOfMail parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-05T05:00:00.000Z
CVE-2004-1130 
Cross-site scripting (XSS) vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute arbitrary web script or HTML via personal information fields, such as (1) username, (2) name, or (3) comments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-05T05:00:00.000Z
CVE-2004-1131 
Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitrary code via long command line arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-08T05:00:00.000Z
CVE-2004-1133 
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft W3Who ISAPI (w3who.dll) allow remote attackers to inject arbitrary HTML and web script via (1) HTTP headers such as "Connection" or (2) invalid parameters whose values are echoed in the resulting error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-08T05:00:00.000Z
CVE-2004-1134 
Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-08T05:00:00.000Z
CVE-2004-1135 
Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1) SITE, (2) XMKD, (3) MKD, and (4) RNFR commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-08T05:00:00.000Z
CVE-2004-1136 
Buffer overflow in CuteFTP Professional 6.0, and possibly other versions, allows remote FTP servers to cause a denial of service (application crash) via large replies to FTP commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-08T05:00:00.000Z
CVE-2004-1137 
Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via (1) the ip_mc_source function, which decrements a counter to -1, or (2) the igmp_marksources function, which does not properly validate IGMP message parameters and performs an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-15T05:00:00.000Z
CVE-2004-1138 
VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-22T05:00:00.000Z
CVE-2004-1139 
Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (application crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-31T05:00:00.000Z
CVE-2004-1140 
Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang) and possibly fill available disk space via an invalid RTP timestamp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-31T05:00:00.000Z
CVE-2004-1141 
The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (application crash) via a certain packet that causes the dissector to access previously-freed memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-31T05:00:00.000Z
CVE-2004-1142 
Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-31T05:00:00.000Z
CVE-2004-1143 
The password generation in mailman before 2.1.5 generates only 5 million unique passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-19T05:00:00.000Z
CVE-2004-1144 
Unknown vulnerability in the 32bit emulation code in Linux 2.4 on AMD64 systems allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-31T05:00:00.000Z
CVE-2004-1145 
Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-31T05:00:00.000Z
CVE-2004-1146 
Multiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for CVSTrac before 1.1.5 allow remote attackers to inject arbitrary HTML and web script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-31T05:00:00.000Z
CVE-2004-1147 
phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary commands via shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-15T05:00:00.000Z
CVE-2004-1148 
phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sql_localfile parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-15T05:00:00.000Z
CVE-2004-1149 
Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files with insecure permissions (ACLs), which allows local users to gain privileges by replacing critical programs with malicious ones, as demonstrated using VetMsg.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-22T05:00:00.000Z
CVE-2004-1150 
Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long (1) device name or (2) sound track number, as demonstrated with a .m3u or .pls playlist file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-29T05:00:00.000Z
CVE-2004-1151 
Multiple buffer overflows in the (1) sys32_ni_syscall and (2) sys32_vm86_warning functions in sys_ia32.c for Linux 2.6.x may allow local attackers to modify kernel memory and gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-08T05:00:00.000Z
CVE-2004-1152 
Buffer overflow in the mailListIsPdf function in Adobe Acrobat Reader 5.09 for Unix allows remote attackers to execute arbitrary code via an e-mail message with a crafted PDF attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-22T05:00:00.000Z
CVE-2004-1153 
Format string vulnerability in Adobe Acrobat Reader 6.0.0 through 6.0.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an .ETD document containing format string specifiers in (1) title or (2) baseurl fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-22T05:00:00.000Z
CVE-2004-1154 
Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-22T05:00:00.000Z
CVE-2004-1155 
Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.  NOTE: later research shows that Internet Explorer 7 on Windows XP SP2 is also vulnerable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1156 
Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1157 
Opera 7.x up to 7.54, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1158 
Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1160 
Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1161 
rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via (1) rdist -P, (2) rsync, or (3) scp -S.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1162 
The unison command in scponly before 4.0 does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via the (1) -rshcmd or (2) -sshcmd flags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1163 
Cisco CNS Network Registrar Central Configuration Management (CCM) server 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (CPU consumption) by ending a connection after sending a certain sequence of packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1164 
The lock manager in Cisco CNS Network Registrar 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (process crash) via a certain "unexpected packet sequence."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1165 
Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1166 
CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1167 
mirrorselect before 0.89 creates temporary files in a world-writable location with predictable file names, which allows remote attackers to overwrite arbitrary files via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1168 
Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to execute arbitrary code via a long Overwrite header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1169 
MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to cause a denial of service (application crash) via an HTTP GET request for a file that does not exist, followed by two carriage returns, which causes a NULL dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1170 
a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1171 
KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the user or (2) created by the SMB protocol handler, stores those credentials for plaintext in the user's .desktop file, which may be created with world-readable permissions, which could allow local users to obtain usernames and passwords for remote resources such as SMB shares.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-10T05:00:00.000Z
CVE-2004-1172 
Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, allows remote attackers to execute arbitrary code via a registration request with a long hostname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-22T05:00:00.000Z
CVE-2004-1173 
Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model (DOM) methods in the DHTML Dynamic HTML (DHTML) Editing Component (DEC) and Javascript that calls showModalDialog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-15T05:00:00.000Z
CVE-2004-1174 
direntry.c in Midnight Commander (mc) 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-22T05:00:00.000Z
CVE-2004-1175 
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-22T05:00:00.000Z
CVE-2004-1176 
Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-22T05:00:00.000Z
CVE-2004-1177 
Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-19T05:00:00.000Z