[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1365?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/oracle23122004C.txt'}, {'name': 'oracle-extproc-command-execution(18662)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18662'}, {'name': '20041223 Oracle extproc local command execution (#NISR23122004C)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110382471608835&w=2'}, {'name': 'VU#316206', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/316206'}, {'name': 'TA04-245A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-245A.html'}, {'name': '10871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10871'}, {'name': '101782', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1365?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1366 mean in the context of cybersecurity?

[Assistant] CVE-2004-1366


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1366.

[Assistant] Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1366?

[Assistant] {'name': 'oracle-sysman-password-plaintext(18661)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18661'}, {'name': '20041223 Oracle clear text passwords (#NISR2122004D)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/385323'}, {'name': 'VU#316206', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/316206'}, {'name': 'TA04-245A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-245A.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/oracle23122004D.txt'}, {'name': '10871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10871'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf'}, {'name': '101782', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1366?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1367 mean in the context of cybersecurity?

[Assistant] CVE-2004-1367


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1367.

[Assistant] Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain that password and use it against SYS or SYSTEM accounts, which may have been installed with the same password.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1367?

[Assistant] {'name': '20041223 Oracle clear text passwords (#NISR2122004D)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110382247308064&w=2'}, {'name': 'VU#316206', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/316206'}, {'name': 'TA04-245A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-245A.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/oracle23122004D.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf'}, {'name': '101782', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1367?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1368 mean in the context of cybersecurity?

[Assistant] CVE-2004-1368


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1368.

[Assistant] ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1368?

[Assistant] {'name': 'oracle-isqlplus-file-access(18656)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18656'}, {'name': '20041223 Oracle ISQLPlus file access vulnerability (#NISR2122004E)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110382264415387&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/oracle23122004E.txt'}, {'name': 'VU#435974', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/435974'}, {'name': 'TA04-245A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-245A.html'}, {'name': '10871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10871'}, {'name': '101782', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1368?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1369 mean in the context of cybersecurity?

[Assistant] CVE-2004-1369


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1369.

[Assistant] The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1369?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/oracle23122004F.txt'}, {'name': 'oracle-tnslsnr-nsgr-dos(18664)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18664'}, {'name': '20041223 Oracle TNS Listener DoS (#NISR2122004F)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110382524401468&w=2'}, {'name': 'VU#316206', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/316206'}, {'name': 'TA04-245A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-245A.html'}, {'name': '10871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10871'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf'}, {'name': '101782', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1369?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1370 mean in the context of cybersecurity?

[Assistant] CVE-2004-1370


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1370.

[Assistant] Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2) WK_ACL.GET_ACL, (3) WK_ACL.STORE_ACL, (4) WK_ADM.COMPLETE_ACL_SNAPSHOT, (5) WK_ACL.DELETE_ACLS_WITH_STATEMENT, or (6) DRILOAD.VALIDATE_STMT.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1370?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/oracle23122004H.txt'}, {'name': '20041223 Oracle multiple PL/SQL injection vulnerabilities (#NISR2122004H)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110382596129607&w=2'}, {'name': 'VU#316206', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/316206'}, {'name': 'TA04-245A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-245A.html'}, {'name': '10871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10871'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf'}, {'name': 'oracle-procedure-sql-injection(18665)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18665'}, {'name': '101782', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1370?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1371 mean in the context of cybersecurity?

[Assistant] CVE-2004-1371


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1371.

[Assistant] Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1371?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/oracle23122004J.txt'}, {'name': '20041223 Oracle wrapped procedure overflow (#NISR2122004J)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110382570313035&w=2'}, {'name': 'VU#316206', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/316206'}, {'name': 'TA04-245A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-245A.html'}, {'name': 'oracle-wrapped-procedure-bo(18666)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18666'}, {'name': '10871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10871'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf'}, {'name': '101782', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1371?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1372 mean in the context of cybersecurity?

[Assistant] CVE-2004-1372


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1372.

[Assistant] Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1372?

[Assistant] {'name': '20041223 IBM DB2 generate_distfile buffer overflow vulnerability (#NISR2122004L)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110382462924162&w=2'}, {'name': '20041223 IBM DB2 rec2xml buffer overflow vulnerability (#NISR2122004J)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110382730431065&w=2'}, {'name': 'db2-rec2xml-bo(18682)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18682'}, {'name': 'db2-generatedistfile-bo(18663)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18663'}, {'name': '11089', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11089'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/db223122004L.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/db223122004K.txt'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1372?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1373 mean in the context of cybersecurity?

[Assistant] CVE-2004-1373


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1373.

[Assistant] Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1373?

[Assistant] {'name': 'shoutcast-format-string(18669)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18669'}, {'name': '12096', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12096'}, {'name': '1012675', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012675'}, {'name': 'GLSA-200501-04', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-04.xml'}, {'name': '20041223 SHOUTcast remote format string vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110382975516003&w=2'}, {'name': '20050219 exwormshoucast  part of PTjob project: SHOUTcast v1.9.4 remote', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110886444014745&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1373?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1374 mean in the context of cybersecurity?

[Assistant] CVE-2004-1374


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1374.

[Assistant] Multiple buffer overflows in NetBSD kernel may allow local users to execute arbitrary code and gain privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1374?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://gleg.net/advisory_netbsd2.shtml'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1374?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1375 mean in the context of cybersecurity?

[Assistant] CVE-2004-1375


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1375.

[Assistant] Unknown vulnerability in System Administration Manager (SAM) in HP-UX B.11.00, B.11.11, B.11.22, and B.11.23 allows local users to gain privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1375?

[Assistant] {'name': '12098', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12098'}, {'name': 'oval:org.mitre.oval:def:5435', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5435'}, {'name': 'SSRT4699', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=110384155209555&w=2'}, {'name': 'P-085', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-085.shtml'}, {'name': 'hp-sam-gain-privileges(18674)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18674'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1375?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1376 mean in the context of cybersecurity?

[Assistant] CVE-2004-1376


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1376.

[Assistant] Directory traversal vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote malicious FTP servers to overwrite arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1376?

[Assistant] {'name': '13704', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13704'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.7a69ezine.org/node/view/176'}, {'name': '20041230 7a69Adv#17 - Internet Explorer FTP download path disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110461358930103&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1376?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1377 mean in the context of cybersecurity?

[Assistant] CVE-2004-1377


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1377.

[Assistant] The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1377?

[Assistant] {'name': 'GLSA-200501-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-02.xml'}, {'name': '12109', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12109'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vuxml.org/freebsd/9168253c-5a6d-11d9-a9e7-0001020eed82.html'}, {'name': '12108', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12108'}, {'name': 'gnu-a2ps-fixpsin-symlink(18671)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18671'}, {'name': 'gnu-a2ps-psmanupin-symlink(18672)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18672'}, {'name': '13641', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13641'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1377?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1378 mean in the context of cybersecurity?

[Assistant] CVE-2004-1378


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1378.

[Assistant] The expat XML parser code, as used in the open source Jabber (jabberd) 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other packages, allows remote attackers to cause a denial of service (application crash) via a malformed packet to a socket that accepts XML connections.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1378?

[Assistant] {'name': '1011384', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011384'}, {'name': '10257', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10257'}, {'name': 'jabberd-xml-dos(17466)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17466'}, {'name': '11231', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11231'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vuxml.org/freebsd/2e25d38b-54d1-11d9-b612-000c6e8f12ef.html'}, {'name': 'GLSA-200409-31', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-31.xml'}, {'name': 'jadc2s-xml-dos(17467)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17467'}, {'name': '1011383', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011383'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://devel.amessage.info/jabberd14/'}, {'name': '[jabberd] 20040919 Jabberd 1.4 critical bug', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail.jabber.org/pipermail/jabberd/2004-September/002004.html'}, {'name': '20040920 Possible DoS attack against jabberd 1.4.3 and jadc2s 0.9.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109583829122679&w=2'}, {'name': '12636', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12636'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1378?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1379 mean in the context of cybersecurity?

[Assistant] CVE-2004-1379


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1379.

[Assistant] Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a (1) DVD or (2) MPEG subpicture header where the second field reuses RLE data from the end of the first field.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1379?

[Assistant] {'name': 'xine-dvd-subpicture-bo(17423)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17423'}, {'name': 'SSA:2004-266', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.320308'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xinehq.de/index.php/security/XSA-2004-5'}, {'name': 'DSA-657', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-657'}, {'name': '11205', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11205'}, {'name': '20040906 XSA-2004-5: heap overflow in DVD subpicture decoder', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/375482/2004-09-02/2004-09-08/0'}, {'name': 'GLSA-200409-30', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-30.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vuxml.org/freebsd/131bd7c4-64a3-11d9-829a-000a95bc6fae.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1379?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1380 mean in the context of cybersecurity?

[Assistant] CVE-2004-1380


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1380.

[Assistant] Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1380?

[Assistant] {'name': 'RHSA-2005:323', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-323.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/mfsa2005-05.html'}, {'name': 'oval:org.mitre.oval:def:100050', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100050'}, {'name': 'web-browser-modal-spoofing(18864)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18864'}, {'name': 'RHSA-2005:335', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-335.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/multiple_browsers_form_field_focus_test/'}, {'name': '12712', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12712'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/multiple_browsers_dialog_box_spoofing_test/'}, {'name': 'oval:org.mitre.oval:def:10211', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10211'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1380?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1381 mean in the context of cybersecurity?

[Assistant] CVE-2004-1381


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1381.

[Assistant] Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1381?

[Assistant] {'name': 'oval:org.mitre.oval:def:100053', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100053'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/mfsa2005-05.html'}, {'name': 'web-browser-inactive-info-disclosure(17789)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17789'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/multiple_browsers_form_field_focus_test/'}, {'name': '12712', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12712'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/multiple_browsers_dialog_box_spoofing_test/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1381?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1382 mean in the context of cybersecurity?

[Assistant] CVE-2004-1382


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1382.

[Assistant] The glibcbug script in glibc 2.3.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2004-0968.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1382?

[Assistant] {'name': 'DSA-636', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-636'}, {'name': 'RHSA-2005:261', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-261.html'}, {'name': 'MDKSA-2004:159', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:159'}, {'name': '20041028 [USN-4-1] Standard C library script vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109899903129801&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1382?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1383 mean in the context of cybersecurity?

[Assistant] CVE-2004-1383


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1383.

[Assistant] Multiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to execute arbitrary SQL statements via the (1) order, (2) project_id, (3) pro_main, or (4) hours_id parameters to index.php or (5) ticket_id to viewticket_details.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1383?

[Assistant] {'name': 'phpgroupware-projectid-sql-injection(18498)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18498'}, {'name': '20041215 Multiple phpGroupWare Vulnerabilities [ phpGroupWare 0.9.16.003 && Earlier ]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110312656029072&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00054-12142004'}, {'name': '11952', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11952'}, {'name': 'GLSA-200501-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1383?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1384 mean in the context of cybersecurity?

[Assistant] CVE-2004-1384


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1384.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) kp3, (2) type, (3) msg, (4) forum_id, (5) pos, (6) cats_app, (7) cat_id, (8) msgball[msgnum], (9) fldball[acctnum] parameters to index.php or (10) ticket_id to viewticket_details.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1384?

[Assistant] {'name': 'phpgroupware-index-preferences-xss(18496)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18496'}, {'name': '20041215 Multiple phpGroupWare Vulnerabilities [ phpGroupWare 0.9.16.003 && Earlier ]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110312656029072&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00054-12142004'}, {'name': '11952', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11952'}, {'name': 'GLSA-200501-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1384?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1385 mean in the context of cybersecurity?

[Assistant] CVE-2004-1385


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1385.

[Assistant] phpGroupWare 0.9.16.003 and earlier allows remote attackers to gain sensitive information via (1) unexpected characters in the session ID such as shell metacharacters, (2) an invalid appname parameter to preferences.php or (3) an invalid menuaction parameter to index.php, which reveals the web server path in an error message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1385?

[Assistant] {'name': 'phpgroupware-path-disclosure(18497)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18497'}, {'name': '20041215 Multiple phpGroupWare Vulnerabilities [ phpGroupWare 0.9.16.003 && Earlier ]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110312656029072&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00054-12142004'}, {'name': 'GLSA-200501-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1385?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1386 mean in the context of cybersecurity?

[Assistant] CVE-2004-1386


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1386.

[Assistant] TikiWiki before 1.8.4.1 does not properly verify uploaded images, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2005-0200.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1386?

[Assistant] {'name': '12110', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12110'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tikiwiki.org/tiki-read_article.php?articleId=97'}, {'name': 'tikiwiki-image-command-execution(18691)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18691'}, {'name': 'GLSA-200501-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-12.xml'}, {'name': 'P-084', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-084.shtml'}, {'name': '1012700', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012700'}, {'name': '12628', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/12628'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1386?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1387 mean in the context of cybersecurity?

[Assistant] CVE-2004-1387


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1387.

[Assistant] The check_forensic script in apache-utils package 1.3.31 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1387?

[Assistant] {'name': 'apache-checkforensic-symlink(18993)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18993'}, {'name': '13925', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13925'}, {'name': '[debian-apache] 20050119 Bug#290974: marked as done (apache: Temporary usage bugs that can be used in symlink attacks)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.debian.org/debian-apache/2005/01/msg00076.html'}, {'name': 'USN-65-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/65-1/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1387?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1388 mean in the context of cybersecurity?

[Assistant] CVE-2004-1388


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1388.

[Assistant] Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1388?

[Assistant] {'name': '[Gpsd-announce] 20050127 Announcing release 2.8 of gpsd', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.berlios.de/pipermail/gpsd-announce/2005-January/000018.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalmunition.com/DMA%5B2005-0125a%5D.txt'}, {'name': 'gpsd-format-string(19079)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19079'}, {'name': "20050126 DMA[2005-0125a] - 'berlios gpsd format string vulnerability'", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110677341711505&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mail-archive.com/debian-bugs-closed%40lists.debian.org/msg02103.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1388?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1389 mean in the context of cybersecurity?

[Assistant] CVE-2004-1389


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1389.

[Assistant] Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1389?

[Assistant] {'name': 'P-020', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-020.shtml'}, {'name': 'nebackup-bpjavasusvc-gain-privileges(17811)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17811'}, {'name': '12901', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12901/'}, {'name': 'VU#685456', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/685456'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://seer.support.veritas.com/docs/271727.htm'}, {'name': '11494', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11494'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1389?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1390 mean in the context of cybersecurity?

[Assistant] CVE-2004-1390


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1390.

[Assistant] Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the (1) -F, (2) name, (3) en, (4) upscript, (5) downscript, (6) retries, (7) timeout, (8) scriptdetach, (9) noscript, (10) nodetach, (11) remote_mac, or (12) local_mac flags.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1390?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.rfdslabs.com.br/qnx-advs-01-2004.txt'}, {'name': '11104', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11104'}, {'name': 'VU#961686', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/961686'}, {'name': '20040903 [RLSA_01-2004] QNX PPPoEd local root vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html'}, {'name': 'Qnx-rtp-pppoed-flags-bo(17280)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17280'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1390?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1391 mean in the context of cybersecurity?

[Assistant] CVE-2004-1391


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1391.

[Assistant] Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious mount program.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1391?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.rfdslabs.com.br/qnx-advs-01-2004.txt'}, {'name': '11105', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11105'}, {'name': '9661', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/9661'}, {'name': 'qnx-rtp-mount-command-execute(17284)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17284'}, {'name': '20040903 [RLSA_01-2004] QNX PPPoEd local root vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html'}, {'name': 'VU#577566', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/577566'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1391?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1392 mean in the context of cybersecurity?

[Assistant] CVE-2004-1392


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1392.

[Assistant] PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to the curl_init function.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1392?

[Assistant] {'name': 'php-openbasedir-restriction-bypass(17900)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17900'}, {'name': 'RHSA-2005:406', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-406.html'}, {'name': '11557', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11557'}, {'name': '20050120 [USN-66-1] PHP vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110625060220934&w=2'}, {'name': 'oval:org.mitre.oval:def:9279', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9279'}, {'name': 'FLSA:2344', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2344'}, {'name': '1011984', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011984'}, {'name': '20041027 PHP4 cURL functions bypass open_basedir', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109898213806099&w=2'}, {'name': 'RHSA-2005:405', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-405.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1392?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1393 mean in the context of cybersecurity?

[Assistant] CVE-2004-1393


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1393.

[Assistant] Unknown vulnerability in the tcsetattr function for Sun Solaris for SPARC 2.6, 7, and 8 allows local users to cause a denial of service (system hang).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1393?

[Assistant] {'name': 'ESB-2004.0085', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=3806'}, {'name': 'VU#379390', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/379390'}, {'name': 'solaris-tcsetattr-dos(14998)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14998'}, {'name': '10730', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10730/'}, {'name': '9548', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9548'}, {'name': '57474', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57474-1'}, {'name': '3786', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3786'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1393?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1394 mean in the context of cybersecurity?

[Assistant] CVE-2004-1394


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1394.

[Assistant] The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in the exec_attr database, which may allow local users with custom rights profiles to execute profile commands with additional privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1394?

[Assistant] {'name': 'solaris-pfexec-gain-privileges(14988)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14988'}, {'name': '57453', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57453-1'}, {'name': 'ESB-2004.0079', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=3800'}, {'name': '10755', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10755/'}, {'name': '1008893', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1008893'}, {'name': '3764', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3764'}, {'name': '9534', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9534'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1394?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1395 mean in the context of cybersecurity?

[Assistant] CVE-2004-1395


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1395.

[Assistant] The Lithtech engine, as used in (1) Contract Jack 1.1 and earlier, (2) No one lives forever 2 1.3 and earlier, (3) Tron 2.0 1.042 and earlier, (4) F.E.A.R. (First Encounter Assault and Recon), and possibly other games, allows remote attackers to cause a denial of service (connection refused) via a UDP packet that causes recvfrom to generate a return code that causes the listening loop to exit, as demonstrated using zero byte packets or packets between 8193 and 12280 bytes, which result in conditions that are not "Operation would block."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1395?

[Assistant] {'name': '13446', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13446/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/lithsock-adv.txt'}, {'name': 'lithtech-engine-communication-dos(18456)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18456'}, {'name': '20051021 F.E.A.R. 1.01 likes lithsock', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038095.html'}, {'name': '17317', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17317'}, {'name': '11902', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11902'}, {'name': '20041213 Socket unreacheable in the Lithtech engine (new protocol)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110297515500671&w=2'}, {'name': '20041213 Socket unreacheable in the Lithtech engine (new protocol)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/029932.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1395?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1396 mean in the context of cybersecurity?

[Assistant] CVE-2004-1396


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1396.

[Assistant] Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service (application crash or CPU consumption) via (1) an mp4 or m4a playlist file that contains invalid tag data or (2) an invalid .nsv or .nsa file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1396?

[Assistant] {'name': '11909', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11909'}, {'name': 'VU#372968', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/372968'}, {'name': 'winamp-nsa-nsv-dos(18467)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18467'}, {'name': 'winamp-mp4-m4a-dos(18466)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18466'}, {'name': '1012525', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/alerts/2004/Dec/1012525.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forums.winamp.com/showthread.php?s=&threadid=202007'}, {'name': '20041213 Winamp 5.07 (latest version) Remote Crash + other', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=110303988101973&w=2'}, {'name': '20041213 Winamp 5.07 (latest version) Remote Crash + other stupid shizle', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110297310503541&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1396?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1397 mean in the context of cybersecurity?

[Assistant] CVE-2004-1397


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1397.

[Assistant] Cross-site scripting (XSS) vulnerability in UseModWiki 1.0 allows remote attackers to inject arbitrary web script or HTML via an argument to wiki.pl.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1397?

[Assistant] {'name': '11924', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11924'}, {'name': '13441', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13441/'}, {'name': 'usemodwiki-wiki-xss(18458)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18458'}, {'name': '20041214 STG Security Advisory: [SSA-20041209-13] UseModWiki XSS vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110305173302388&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1397?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1398 mean in the context of cybersecurity?

[Assistant] CVE-2004-1398


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1398.

[Assistant] Format string vulnerability in prelink.c in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via format string specifiers in the extension argument.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1398?

[Assistant] {'name': '20031', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/20031'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.netragard.com/pdfs/research/apple-kext-tools-20060822.txt'}, {'name': 'roxio-toast-tdixsupport-format-string(18472)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18472'}, {'name': '20060913 [NETRAGARD-20060822 SECURITY ADVISORY] [ APPLE COMPUTER CORPORATION KEXTLOAD VULNERABILITY + ROXIO TOAST TITANUM 7 HELPER APP - LOCAL ROOT COMROMISE]', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049452.html'}, {'name': '20041214 Possible local root vulnerability in Roxio Toast on Mac OS X', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110305083706943&w=2'}, {'name': '11926', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11926'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1398?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1399 mean in the context of cybersecurity?

[Assistant] CVE-2004-1399


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1399.

[Assistant] Directory traversal vulnerability in the Attachment module 2.3.10 and earlier for phpBB allows remote attackers to read arbitrary files via a .. (dot dot) in the filename.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1399?

[Assistant] {'name': '20041214 phpBB Attachment Mod Directory Traversal HTTP POST Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110304269031484&w=2'}, {'name': '13421', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13421/'}, {'name': 'attachment-mod-directory-traversal(18437)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18437'}, {'name': '11893', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11893'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1399?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1400 mean in the context of cybersecurity?

[Assistant] CVE-2004-1400


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1400.

[Assistant] The control panel in ASP Calendar does not require authentication to access, which allows remote attackers to gain unauthorized access via a direct request to main.asp.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1400?

[Assistant] {'name': '20041214 ASP Calendar Vulnerability <www.ashiyane.com>', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110304839629822&w=2'}, {'name': 'asp-calendar-gain-access(18474)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18474'}, {'name': '11931', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11931'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1400?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1401 mean in the context of cybersecurity?

[Assistant] CVE-2004-1401


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1401.

[Assistant] SQL injection vulnerability in verify.asp in Asp-rider allows remote attackers to execute arbitrary SQL statements and bypass authentication via the username parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1401?

[Assistant] {'name': '11933', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11933'}, {'name': '20041214 ASP-rider is vulnerable to sql injection attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110305802005220&w=2'}, {'name': '13470', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13470/'}, {'name': 'asp-rider-verify-sql-injection(18479)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18479'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1401?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1402 mean in the context of cybersecurity?

[Assistant] CVE-2004-1402


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1402.

[Assistant] SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string parameter for index.php, (2) comments.php, or (3) the administrator login page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1402?

[Assistant] {'name': '11946', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11946'}, {'name': '20041215 iwebnegar is vulnerable to all kind of sql injections', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110314454810163&w=2'}, {'name': 'iwebnegar-sql-injection(18505)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18505'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1402?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1403 mean in the context of cybersecurity?

[Assistant] CVE-2004-1403


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1403.

[Assistant] PHP remote file inclusion vulnerability in index.php in GNUBoard 3.39 and earlier allows remote attackers to execute arbitrary PHP code by modifying the doc parameter to reference a URL on a remote web server that contains the code.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1403?

[Assistant] {'name': '11948', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11948'}, {'name': '13479', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13479/'}, {'name': 'gnuboard-doc-index-file-include(18494)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18494'}, {'name': '20041215 STG Security Advisory: [SSA-20041214-14] GNUBoard PHP injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110313585810712&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sir.co.kr/?doc=bbs/gnuboard.php&bo_table=pds&page=1&wr_id=1871'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1403?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1404 mean in the context of cybersecurity?

[Assistant] CVE-2004-1404


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1404.

[Assistant] Attachment Mod 2.3.10 module for phpBB, when used with Apache mod_mime, does not properly handle files with multiple file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1404?

[Assistant] {'name': '13421', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13421/'}, {'name': '20041216 STG Security Advisory: [SSA-20041215-18] Vulnerability of uploading files with multiple extensions in phpBB Attachment Mod', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110321557806215&w=2'}, {'name': '11893', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11893'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.opentools.de/board/viewtopic.php?t=3590'}, {'name': 'attachment-mod-file-upload(18438)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18438'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1404?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1405 mean in the context of cybersecurity?

[Assistant] CVE-2004-1405


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1405.

[Assistant] MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1405?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://wikipedia.sourceforge.net/'}, {'name': '11985', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11985'}, {'name': '20041216 STG Security Advisory: [SSA-20041215-19] Vulnerability of uploading files with multiple extensions in MediaWiki', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110321710420059&w=2'}, {'name': '13478', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13478/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1405?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1406 mean in the context of cybersecurity?

[Assistant] CVE-2004-1406


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1406.

[Assistant] SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to inject arbitrary SQL commands via the (1) st or (2) keywords parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1406?

[Assistant] {'name': 'ikonboard-ikonboard-sql-injection(18533)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18533'}, {'name': '20041216 [MaxPatrol] SQL-injection in Ikonboard 3.1.x', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110321654705580&w=2'}, {'name': '11982', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11982'}, {'name': '13513', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13513'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1406?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1407 mean in the context of cybersecurity?

[Assistant] CVE-2004-1407


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1407.

[Assistant] Multiple directory traversal vulnerabilities in singapore Image Gallery Web Application 0.9.10 allow remote attackers to (1) read arbitrary files via the showThumb method for thumb.php, or (2) delete arbitrary files via admin.class.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1407?

[Assistant] {'name': '20041216 [SIG^2 G-TEC] singapore Image Gallery Web Application v0.9.10 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110323479715051&w=2'}, {'name': 'singapore-thumb-directory-traversal(18528)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18528'}, {'name': 'singapore-adminclass-directory-traversal(18532)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18532'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/singapore0910.html'}, {'name': '11990', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11990'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1407?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1408 mean in the context of cybersecurity?

[Assistant] CVE-2004-1408


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1408.

[Assistant] The addImage method for admin.class.php in Image Gallery Web Application 0.9.10 does not properly check filenames, which allows remote attackers to upload and execute arbitrary files.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1408?

[Assistant] {'name': '20041216 [SIG^2 G-TEC] singapore Image Gallery Web Application v0.9.10 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110323479715051&w=2'}, {'name': 'singapore-adminclass-file-upload(18531)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18531'}, {'name': '11990', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11990'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1408?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1409 mean in the context of cybersecurity?

[Assistant] CVE-2004-1409


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1409.

[Assistant] Multiple cross-site scripting vulnerabilities in Image Gallery Web Application 0.9.10 allow remote attackers to inject arbitrary web script or HTML.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1409?

[Assistant] {'name': '20041216 [SIG^2 G-TEC] singapore Image Gallery Web Application v0.9.10 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110323479715051&w=2'}, {'name': '11990', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11990'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1409?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1410 mean in the context of cybersecurity?

[Assistant] CVE-2004-1410


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1410.

[Assistant] Cross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary web script via a URL, which is echoed in a popup window that displays a parsing error message, a different vulnerability than CVE-2004-1229.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1410?

[Assistant] {'name': '13450', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13450'}, {'name': '20041217 Gadu-Gadu, another two bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110330741828726&w=2'}, {'name': '12524', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/12524'}, {'name': '11998', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11998'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1410?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1411 mean in the context of cybersecurity?

[Assistant] CVE-2004-1411


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1411.

[Assistant] Gadu-Gadu build 155 and earlier allows remote attackers to cause a denial of service (infinite loop) via a message that contains an image whose filename does not start with restricted characters.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1411?

[Assistant] {'name': 'gadu-gadu-image-dos(18580)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18580'}, {'name': '20041217 Gadu-Gadu, another two bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110330741828726&w=2'}, {'name': '11998', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11998'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1411?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1412 mean in the context of cybersecurity?

[Assistant] CVE-2004-1412


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1412.

[Assistant] Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.x allows remote attackers to inject arbitrary web script or HTML via the searchm parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1412?

[Assistant] {'name': '12037', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12037'}, {'name': 'kayako-index-xss(18571)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18571'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00056-12182004'}, {'name': '20041218 Multiple Vulnerabilities In Kayako eSupport v2.x', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110352428607171&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1412?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1413 mean in the context of cybersecurity?

[Assistant] CVE-2004-1413


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1413.

[Assistant] Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands via the (1) subcat, (2) rate, (3) questiondetails, (4) ticketkey22, (5) email22 parameters to index.php, or (6) the e-mail field of the Forgot Key feature.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1413?

[Assistant] {'name': '12037', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12037'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00056-12182004'}, {'name': '20041218 Multiple Vulnerabilities In Kayako eSupport v2.x', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110352428607171&w=2'}, {'name': 'kayako-sql-injection(18572)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18572'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1413?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1414 mean in the context of cybersecurity?

[Assistant] CVE-2004-1414


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1414.

[Assistant] Gadu-Gadu 6.1 build 156 allows remote attackers to cause a denial of service (application hang) via a message that contains many special strings that are converted to images.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1414?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.soltysiak.com/gg-dos.txt'}, {'name': '20041220 Gadu-Gadu Remote DoS (all versions)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110357519312200&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1414?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1415 mean in the context of cybersecurity?

[Assistant] CVE-2004-1415


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1415.

[Assistant] SQL injection vulnerability in (1) disp_album.php and possibly (2) disp_img.php in 2Bgal 2.4 and 2.5.1 allows remote attackers to execute arbitrary SQL commands via the id_album parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1415?

[Assistant] {'name': '2bgal-dispalbum-sql-injection(18645)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18645'}, {'name': '20041222 2Bgal : 2.4 & 2.5.1 SQL injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110375900916558&w=2'}, {'name': '12083', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12083'}, {'name': '13620', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13620'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1415?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1416 mean in the context of cybersecurity?

[Assistant] CVE-2004-1416


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1416.

[Assistant] pnxr3260.dll in the RealOne 2.0 build 6.0.11.868 browser plugin, as used in Internet Explorer, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embed tag.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1416?

[Assistant] {'name': '12660', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/12660'}, {'name': '20041222 Realone2.0 "pnxr3260.dll" Lets Remote Users IE  Browser Crash', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110374765215675&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1416?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1417 mean in the context of cybersecurity?

[Assistant] CVE-2004-1417


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1417.

[Assistant] Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1417?

[Assistant] {'name': '12089', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12089'}, {'name': '13619', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13619/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.psychostats.com/forums/viewtopic.php?t=11022'}, {'name': 'psychostats-login-xss(18651)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18651'}, {'name': '20041223 Cross Site Scripting In PsychoStats 2.2.4 Beta && Earlier', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110383119525592&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00057-12222004'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1417?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1418 mean in the context of cybersecurity?

[Assistant] CVE-2004-1418


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1418.

[Assistant] Cross-site scripting (XSS) vulnerability in WPKontakt 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via an e-mail address, which is not quoted when a parsing error is generated.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1418?

[Assistant] {'name': 'wpkontakt-email-command-execution(18685)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18685'}, {'name': '12097', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12097'}, {'name': '20041223 WPkontakt message parsing error', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110384387332443&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1418?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1419 mean in the context of cybersecurity?

[Assistant] CVE-2004-1419


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1419.

[Assistant] PHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) _zb_path parameter to outlogin.php or (2) dir parameter to write.php to reference a URL on a remote web server that contains the code.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1419?

[Assistant] {'name': '12580', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/12580'}, {'name': 'zeroboard-outlogin-file-include(18677)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18677'}, {'name': '20041224 STG Security Advisory: [SSA-20041220-16] PHP source injection and cross-site scripting vulnerabilities in ZeroBoard', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110391024404947&w=2'}, {'name': '20041223 STG Security Advisory: [SSA-20041220-16] PHP source injection and cross-site scripting vulnerabilities in ZeroBoard', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030224.html'}, {'name': '13649', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13649'}, {'name': '12581', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/12581'}, {'name': '12103', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12103'}, {'name': 'zeroboard-write-file-include(18679)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18679'}, {'name': '1012677', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012677'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1419?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1420 mean in the context of cybersecurity?

[Assistant] CVE-2004-1420


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1420.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) site_title or (2) http_images parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1420?

[Assistant] {'name': '20041231 WHM AutoPilot Security Release [ Plus Upgrade Instructions ]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110451997904494&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.whmautopilot.com/forum/lofiversion/index.php/t6785.html'}, {'name': '13673', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13673'}, {'name': '20041228 Multiple WHM Autopilot Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110425620105529&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00059-12272004'}, {'name': '12119', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12119'}, {'name': 'whm-autopilot-header-xss(18700)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18700'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1420?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1421 mean in the context of cybersecurity?

[Assistant] CVE-2004-1421


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1421.

[Assistant] Multiple PHP remote file inclusion vulnerabilities (1) step_one.php, (2) step_one_tables.php, (3) step_two_tables.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the server_inc parameter to reference a URL on a remote web server that contains the code.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1421?

[Assistant] {'name': '20041231 WHM AutoPilot Security Release [ Plus Upgrade Instructions ]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110451997904494&w=2'}, {'name': 'whm-autopilot-php-file-include(18699)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18699'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.whmautopilot.com/forum/lofiversion/index.php/t6785.html'}, {'name': '12695', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/12695'}, {'name': '1012707', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012707'}, {'name': '13673', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13673'}, {'name': '20041228 Multiple WHM Autopilot Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110425620105529&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00059-12272004'}, {'name': '12119', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12119'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1421?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1422 mean in the context of cybersecurity?

[Assistant] CVE-2004-1422


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1422.

[Assistant] WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php settings.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1422?

[Assistant] {'name': '20041231 WHM AutoPilot Security Release [ Plus Upgrade Instructions ]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110451997904494&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.whmautopilot.com/forum/lofiversion/index.php/t6785.html'}, {'name': '13673', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13673'}, {'name': '20041228 Multiple WHM Autopilot Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110425620105529&w=2'}, {'name': 'whm-autopilot-information-disclosure(18701)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18701'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00059-12272004'}, {'name': '12119', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12119'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1422?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1423 mean in the context of cybersecurity?

[Assistant] CVE-2004-1423


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1423.

[Assistant] Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virtual Law Office (VLO) and other products, allow remote attackers to execute arbitrary PHP code via a URL in the phpc_root_path parameter to (1) includes/calendar.php or (2) includes/setup.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2004-1423?

[Assistant] {'name': '1017107', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1017107'}, {'name': '12127', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12127'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00060-12292004'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=296020&group_id=46800'}, {'name': 'ADV-2006-4145', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/4145'}, {'name': '20041229 php-Calendar File Include Vulnerability [ Command Exec ]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110434580716205&w=2'}, {'name': '2608', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/2608'}, {'name': '20657', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/20657'}, {'name': 'vlo-phpcrootpath-file-include(29710)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/29710'}, {'name': '20061021 Virtual Law Office (phpc_root_path) Remote File Include Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/449397/100/0/threaded'}, {'name': '22516', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22516'}, {'name': 'php-calendar-file-include(18710)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18710'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1423?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2004-1424 mean in the context of cybersecurity?

[Assistant] CVE-2004-1424