rainbutterfly/cve_corpus huggingface dataset:
CVE-2004-0452 
Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-12-31T05:00:00.000Z
CVE-2004-0453 
Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service (emulator crash) and possibly execute arbitrary code via format string specifiers in an output string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-24T04:00:00.000Z
CVE-2004-0454 
Buffer overflow in the msg function for rlpr daemon (rlprd) 2.04 allows local users to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-30T04:00:00.000Z
CVE-2004-0455 
Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-30T04:00:00.000Z
CVE-2004-0456 
Stack-based buffer overflow in pavuk 0.9pl28, 0.9pl27, and possibly other versions allows remote web sites to execute arbitrary code via a long HTTP Location header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-06T04:00:00.000Z
CVE-2004-0457 
The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-08-19T04:00:00.000Z
CVE-2004-0458 
mah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which triggers a null pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-08-19T04:00:00.000Z
CVE-2004-0459 
The Clear Channel Assessment (CCA) algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy (aka "jabber"), which prevents devices from transmitting data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-20T04:00:00.000Z
CVE-2004-0460 
Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-24T04:00:00.000Z
CVE-2004-0461 
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-24T04:00:00.000Z
CVE-2004-0462 
The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session with the same server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-10T04:00:00.000Z
CVE-2004-0465 
Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequences in the WCP_USER parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-23T05:00:00.000Z
CVE-2004-0466 
WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service (hang) via a URL containing an MS-DOS device name such as (1) AUX, (2) CON, (3) PRN, (4) COM1, or (5) LPT1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-23T05:00:00.000Z
CVE-2004-0467 
Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service (routing disabled) via a large number of MPLS packets, which are not filtered or verified before being sent to the Routing Engine, which reduces the speed at which other packets are processed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-01-29T05:00:00.000Z
CVE-2004-0468 
Memory leak in Juniper JUNOS Packet Forwarding Engine (PFE) allows remote attackers to cause a denial of service (memory exhaustion and device reboot) via certain IPv6 packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-08T04:00:00.000Z
CVE-2004-0469 
Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-14T04:00:00.000Z
CVE-2004-0470 
BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2, when editing weblogic.xml using WebLogic Builder or the SecurityRoleAssignmentMBean.toXML method, inadvertently removes security-role-assignment tags when weblogic.xml does not have a principal-name tag, which can remove intended access restrictions for the associated web application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-20T04:00:00.000Z
CVE-2004-0471 
BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce site restrictions for starting and stopping servers for users in the Admin and Operator security roles, which allows unauthorized users to cause a denial of service (service shutdown).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-20T04:00:00.000Z
CVE-2004-0473 
Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters that begin a hostname in a telnet URI, which allows remote attackers to insert options to the resulting command line and overwrite arbitrary files via (1) the "-f" option on Windows XP or (2) the "-n" option on Linux.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-20T04:00:00.000Z
CVE-2004-0474 
Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL.  NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-20T04:00:00.000Z
CVE-2004-0475 
The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double backward slash ("\\") before the target CHM file, as demonstrated using an "ms-its" URL to ntshared.chm.  NOTE: this bug may overlap CVE-2003-1041.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-20T04:00:00.000Z
CVE-2004-0476 
Buffer overflow in 3Com OfficeConnect Remote 812 ADSL Router 1.1.9.4 allows remote attackers to cause a denial of service (reboot or packet loss) via a long string containing Telnet escape characters to the Telnet port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0477 
Unknown vulnerability in 3Com OfficeConnect Remote 812 ADSL Router allows remote attackers to bypass authentication via repeated attempts using any username and password.  NOTE: this identifier was inadvertently re-used for another issue due to a typo; that issue was assigned CVE-2004-0447.  This candidate is ONLY for the ADSL router bypass.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-08T04:00:00.000Z
CVE-2004-0478 
Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javascript with an infinite loop  that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded ctrl-U.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-20T04:00:00.000Z
CVE-2004-0479 
Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables the imagetoolbar functionality with a META tag, which triggers a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-20T04:00:00.000Z
CVE-2004-0480 
Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-30T04:00:00.000Z
CVE-2004-0481 
The logging feature in kcms_configure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local users to corrupt arbitrary files via a symlink attack on the KCS_ClogFile file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-24T05:00:00.000Z
CVE-2004-0482 
Multiple integer overflows in (1) procfs_cmdline.c, (2) procfs_fpregs.c, (3) procfs_linux.c, (4) procfs_regs.c, (5) procfs_status.c, and (6) procfs_subr.c in procfs for OpenBSD 3.5 and earlier allow local users to read sensitive kernel memory and possibly perform other unauthorized activities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-20T04:00:00.000Z
CVE-2004-0483 
Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service (infinite loop) via certain RPC requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-20T04:00:00.000Z
CVE-2004-0484 
mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a table containing a form that crosses multiple td elements, and whose "float: left" class is defined in a link to a CSS stylesheet after the end of the table, which may trigger a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-20T04:00:00.000Z
CVE-2004-0485 
The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a disk image file (.dmg) to be mounted as a disk volume.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-28T04:00:00.000Z
CVE-2004-0486 
HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a help: URI handler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-28T04:00:00.000Z
CVE-2004-0487 
A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service (resource consumption) and possibly execute arbitrary programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0488 
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-28T04:00:00.000Z
CVE-2004-0489 
Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers to (1) execute arbitrary code via the ProxyCommand option or (2) conduct port forwarding via the -R option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-28T04:00:00.000Z
CVE-2004-0490 
cPanel, when compiling Apache 1.3.29 and PHP with the mod_phpsuexec option, does not set the --enable-discard-path option, which causes php to use the SCRIPT_FILENAME variable to find and execute a script instead of the PATH_TRANSLATED variable, which allows local users to execute arbitrary PHP code as other users via a URL that references the attacker's script after the user's script, which executes the attacker's script with the user's privileges, a different vulnerability than CVE-2004-0529.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0491 
The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-06T05:00:00.000Z
CVE-2004-0492 
Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-23T04:00:00.000Z
CVE-2004-0493 
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-30T04:00:00.000Z
CVE-2004-0494 
Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-08-05T04:00:00.000Z
CVE-2004-0495 
Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-23T04:00:00.000Z
CVE-2004-0496 
Multiple unknown vulnerabilities in Linux kernel 2.6 allow local users to gain privileges or access kernel memory, a different set of vulnerabilities than those identified in CVE-2004-0495, as found by the Sparse source code checking tool.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-06T04:00:00.000Z
CVE-2004-0497 
Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-06T04:00:00.000Z
CVE-2004-0498 
The H.323 protocol agent in StoneSoft firewall engine 2.2.8 and earlier allows remote attackers to cause a denial of service (crash) via crafted H.323 packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-01T04:00:00.000Z
CVE-2004-0500 
Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-02T04:00:00.000Z
CVE-2004-0501 
Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message containing a Vector Markup Language (VML) entity whose src parameter points to the remote site, which could allow remote attackers to know when a message has been read, verify valid e-mail addresses, and possibly leak other information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0502 
Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original message, which allows remote attackers to bypass zone restrictions and exploit other issues that rely on predictable locations, as demonstrated using a shell: URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0503 
Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0504 
Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0505 
The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0506 
The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash) via unknown attack vectors that cause a null pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0507 
Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0510 
Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demonstrated via the execmail program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-28T04:00:00.000Z
CVE-2004-0511 
Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service by triggering a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-28T04:00:00.000Z
CVE-2004-0512 
Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service by triggering a core dump.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-10-28T04:00:00.000Z
CVE-2004-0513 
Unspecified vulnerability in Mac OS X before 10.3.4 has unknown impact and attack vectors related to "logging when tracing system calls."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0514 
Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of directory services lookups."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0515 
Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of console log files."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0516 
Unknown vulnerability in Mac OS X 10.3.4, related to "package installation scripts," a different vulnerability than CVE-2004-0517.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0517 
Unknown vulnerability in Mac OS X 10.3.4, related to "handling of process IDs during package installation," a different vulnerability than CVE-2004-0516.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0518 
Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to "the use of SSH and reporting errors," has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0519 
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0520 
Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as demonstrated using read_body.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0521 
SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0522 
Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-08T04:00:00.000Z
CVE-2004-0523 
Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2004-0524 
Buffer overflow in the chpasswd command in the Change_passwd plugin before 4.0, as used in SquirrelMail, allows local users to gain root privileges via a long user name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-08T04:00:00.000Z
CVE-2004-0525 
HP Integrated Lights-Out (iLO) 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service (hang) by accessing iLO using the TCP/IP reserved port zero.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-08T04:00:00.000Z