Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0212.

Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an anonymous share.


Provide references for further information: Can you share references or external links related to CVE-2004-0212?

{'name': '20040714 Unchecked buffer in mstask.dll', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108981403025596&w=2'}, {'name': 'win-taskscheduler-bo(16591)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16591'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/mstaskjob.txt'}, {'name': 'TA04-196A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-196A.html'}, {'name': 'oval:org.mitre.oval:def:3428', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3428'}, {'name': 'oval:org.mitre.oval:def:1344', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1344'}, {'name': "20040714 Microsoft Windows Task Scheduler '.job' Stack Overflow", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108981273009250&w=2'}, {'name': 'oval:org.mitre.oval:def:1964', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1964'}, {'name': 'oval:org.mitre.oval:def:1781', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1781'}, {'name': 'VU#228028', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/228028'}, {'name': 'MS04-022', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-022'}, {'name': '12060', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12060'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0212?


Explain the CVE ID: What does the identifier CVE-2004-0213 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0213.

Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that sends a Windows message to cause Utility Manager to launch winhlp32 by directly accessing the context sensitive help and bypassing the GUI, then sending another message to winhlp32 in order to open a user-selected file, a different vulnerability than CVE-2003-0908.


Provide references for further information: Can you share references or external links related to CVE-2004-0213?

{'name': 'oval:org.mitre.oval:def:2495', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2495'}, {'name': 'TA04-196A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-196A.html'}, {'name': 'VU#868580', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/868580'}, {'name': 'win-utilitymanager-gain-privileges(16592)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16592'}, {'name': '20040713 Microsoft Window Utility Manager Local Elevation of Privileges', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108975382413405&w=2'}, {'name': 'MS04-019', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-019'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0213?


Explain the CVE ID: What does the identifier CVE-2004-0214 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0214.

Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.


Provide references for further information: Can you share references or external links related to CVE-2004-0214?

{'name': '322857', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B322857'}, {'name': 'oval:org.mitre.oval:def:2638', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2638'}, {'name': '1011647', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011647'}, {'name': 'oval:org.mitre.oval:def:5307', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5307'}, {'name': 'oval:org.mitre.oval:def:1601', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1601'}, {'name': '10213', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10213'}, {'name': 'win-ms04037-patch(17662)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17662'}, {'name': '5687', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5687'}, {'name': 'VU#616200', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/616200'}, {'name': "20040425 Microsoft's Explorer and Internet Explorer long share name buffer overflow.", 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/lists/fulldisclosure/2004/Apr/0933.html'}, {'name': 'oval:org.mitre.oval:def:4345', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4345'}, {'name': '11482', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11482/'}, {'name': 'oval:org.mitre.oval:def:1749', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1749'}, {'name': 'win-long-fileshare-bo(15956)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15956'}, {'name': "20040425 Microsoft's Explorer and Internet Explorer long share name buffer overflow.", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/lists/bugtraq/2004/Apr/0322.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/windowsntfocus/5JP0M1PCKI.html'}, {'name': 'MS04-037', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-037'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0214?


Explain the CVE ID: What does the identifier CVE-2004-0215 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0215.

Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header.


Provide references for further information: Can you share references or external links related to CVE-2004-0215?

{'name': 'TA04-196A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-196A.html'}, {'name': 'oval:org.mitre.oval:def:2137', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2137'}, {'name': 'oval:org.mitre.oval:def:1950', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1950'}, {'name': 'oval:org.mitre.oval:def:2657', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2657'}, {'name': 'MS04-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-018'}, {'name': 'outlook-malformed-email-header-dos(16585)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16585'}, {'name': 'VU#869640', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/869640'}, {'name': 'oval:org.mitre.oval:def:3376', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3376'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0215?


Explain the CVE ID: What does the identifier CVE-2004-0216 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0216.

Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, which triggers the integer overflow when calculating a buffer length and leads to a heap-based buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2004-0216?

{'name': 'oval:org.mitre.oval:def:5316', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5316'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/msinsengfull.txt'}, {'name': 'VU#637760', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/637760'}, {'name': 'MS04-038', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038'}, {'name': 'ie-installenginectl-setciffile-bo(17620)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17620'}, {'name': 'oval:org.mitre.oval:def:7865', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7865'}, {'name': 'TA04-293A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-293A.html'}, {'name': 'ie-ms04038-patch(17651)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17651'}, {'name': 'oval:org.mitre.oval:def:7717', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7717'}, {'name': 'oval:org.mitre.oval:def:6100', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6100'}, {'name': 'oval:org.mitre.oval:def:6600', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6600'}, {'name': '20050119 Microsoft Internet Explorer Install Engine Control Buffer Overflow (#NISR19012005a)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110616383332055&w=2'}, {'name': '20041012 Microsoft Internet Explorer Install Engine Control Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109760693512754&w=2'}, {'name': '20050119 Microsoft Internet Explorer Install Engine Control Buffer Overflow (#NISR19012005a)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=110619893620517&w=2'}, {'name': 'oval:org.mitre.oval:def:5329', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5329'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0216?


Explain the CVE ID: What does the identifier CVE-2004-0217 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0217.

The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.


Provide references for further information: Can you share references or external links related to CVE-2004-0217?

{'name': '9662', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9662'}, {'name': 'symantec-scanengine-race-condition(15215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15215'}, {'name': '20040216 Possible race condition in Symantec AntiVirus Scan Engine for Red', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107694800908164&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0217?


Explain the CVE ID: What does the identifier CVE-2004-0218 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0218.

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (infinite loop) via an ISAKMP packet with a zero-length payload, as demonstrated by the Striker ISAKMP Protocol Test Suite.


Provide references for further information: Can you share references or external links related to CVE-2004-0218?

{'name': '1009468', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2004/Mar/1009468.html'}, {'name': '20040317 015: RELIABILITY FIX: March 17, 2004', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata.html'}, {'name': 'openbsd-isakmp-zerolength-dos(15518)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15518'}, {'name': '10028', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10028'}, {'name': '20040323 R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108008530028019&w=2'}, {'name': '11156', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11156'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/advisories/R7-0018.html'}, {'name': 'VU#349113', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/349113'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0218?


Explain the CVE ID: What does the identifier CVE-2004-0219 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0219.

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a malformed IPSEC SA payload, as demonstrated by the Striker ISAKMP Protocol Test Suite.


Provide references for further information: Can you share references or external links related to CVE-2004-0219?

{'name': 'openbsd-isakmp-ipsec-dos(15628)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15628'}, {'name': '1009468', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2004/Mar/1009468.html'}, {'name': '9907', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9907'}, {'name': '20040317 015: RELIABILITY FIX: March 17, 2004', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata.html'}, {'name': '20040323 R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108008530028019&w=2'}, {'name': 'VU#785945', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/785945'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/advisories/R7-0018.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0219?


Explain the CVE ID: What does the identifier CVE-2004-0220 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0220.

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a malformed Cert Request payload, which causes an integer underflow that is used in a malloc operation that is not properly handled, as demonstrated by the Striker ISAKMP Protocol Test Suite.


Provide references for further information: Can you share references or external links related to CVE-2004-0220?

{'name': '1009468', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2004/Mar/1009468.html'}, {'name': '9907', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9907'}, {'name': '20040317 015: RELIABILITY FIX: March 17, 2004', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata.html'}, {'name': '20040323 R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108008530028019&w=2'}, {'name': 'VU#223273', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/223273'}, {'name': 'openbsd-isakmp-integer-underflow(15629)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15629'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/advisories/R7-0018.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0220?


Explain the CVE ID: What does the identifier CVE-2004-0221 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0221.

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as demonstrated by the Striker ISAKMP Protocol Test Suite.


Provide references for further information: Can you share references or external links related to CVE-2004-0221?

{'name': '1009468', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2004/Mar/1009468.html'}, {'name': '9907', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9907'}, {'name': '20040317 015: RELIABILITY FIX: March 17, 2004', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata.html'}, {'name': '20040323 R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108008530028019&w=2'}, {'name': 'VU#524497', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/524497'}, {'name': 'openbsd-isakmp-delete-dos(15630)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15630'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/advisories/R7-0018.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0221?


Explain the CVE ID: What does the identifier CVE-2004-0222 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0222.

Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via certain ISAKMP packets, as demonstrated by the Striker ISAKMP Protocol Test Suite.


Provide references for further information: Can you share references or external links related to CVE-2004-0222?

{'name': '1009468', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2004/Mar/1009468.html'}, {'name': '20040317 015: RELIABILITY FIX: March 17, 2004', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata.html'}, {'name': '20040323 R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108008530028019&w=2'}, {'name': 'openbsd-isakmp-memory-leak(15519)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15519'}, {'name': '10032', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10032'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/advisories/R7-0018.html'}, {'name': 'VU#996177', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/996177'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0222?


Explain the CVE ID: What does the identifier CVE-2004-0224 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0224.

Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code "when Unicode character is out of BMP range."


Provide references for further information: Can you share references or external links related to CVE-2004-0224?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=5767'}, {'name': 'courier-codeset-converter-bo(15434)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15434'}, {'name': '11087', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11087/'}, {'name': '9845', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9845'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0224?


Explain the CVE ID: What does the identifier CVE-2004-0226 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0226.

Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0226?

{'name': 'SuSE-SA:2004:012', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_12_mc.html'}, {'name': 'GLSA-200405-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-21.xml'}, {'name': 'midnight-commander-local-privileges(16016)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16016'}, {'name': 'MDKSA-2004:039', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:039'}, {'name': 'DSA-497', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-497'}, {'name': 'RHSA-2004:172', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-172.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0226?


Explain the CVE ID: What does the identifier CVE-2004-0227 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0227.

Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to execute arbitrary code via a long query string.


Provide references for further information: Can you share references or external links related to CVE-2004-0227?

{'name': 'zoneminder-zms-bo(16136)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16136'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zoneminder.com/index.php?id=20&type=0&backPID=20&tt_news=29'}, {'name': '10340', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10340'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0227?


Explain the CVE ID: What does the identifier CVE-2004-0228 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0228.

Integer signedness error in the cpufreq proc handler (cpufreq_procctl) in Linux kernel 2.6 allows local users to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2004-0228?

{'name': '11464', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11464'}, {'name': 'linux-cpufreq-info-disclosure(15951)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15951'}, {'name': 'FEDORA-2004-111', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/updates/FEDORA-2004-111.shtml'}, {'name': 'SuSE-SA:2004:010', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_10_kernel.html'}, {'name': '11491', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11491'}, {'name': '11683', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11683'}, {'name': '11486', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11486'}, {'name': 'MDKSA-2004:050', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:050'}, {'name': '11429', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11429'}, {'name': 'CLA-2004:852', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852'}, {'name': 'GLSA-200407-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200407-02.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0228?


Explain the CVE ID: What does the identifier CVE-2004-0229 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0229.

The framebuffer driver in Linux kernel 2.6.x does not properly use the fb_copy_cmap function, with unknown impact.


Provide references for further information: Can you share references or external links related to CVE-2004-0229?

{'name': 'linux-framebuffer(15974)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15974'}, {'name': 'SuSE-SA:2004:010', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_10_kernel.html'}, {'name': '10211', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10211'}, {'name': 'MDKSA-2004:037', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:037'}, {'name': 'CLA-2004:852', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852'}, {'name': 'GLSA-200407-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200407-02.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0229?


Explain the CVE ID: What does the identifier CVE-2004-0230 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0230.

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.


Provide references for further information: Can you share references or external links related to CVE-2004-0230?

{'name': 'oval:org.mitre.oval:def:2689', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2689'}, {'name': 'oval:org.mitre.oval:def:3508', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3508'}, {'name': 'TA04-111A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-111A.html'}, {'name': 'oval:org.mitre.oval:def:5711', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5711'}, {'name': '20040425 Perl code exploting TCP not checking RST ACK.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108302060014745&w=2'}, {'name': 'SSRT061264', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/449179/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.uniras.gov.uk/vuls/2004/236929/index.htm'}, {'name': 'MS06-064', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064'}, {'name': '11440', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11440'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb.juniper.net/JSA10638'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10053'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html'}, {'name': 'VU#415294', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/415294'}, {'name': 'SSRT4696', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=108506952116653&w=2'}, {'name': 'SCOSA-2005.9', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt'}, {'name': '20040403-01-A', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040403-01-A.asc'}, {'name': 'MS05-019', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019'}, {'name': 'HPSBST02161', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/449179/100/0/threaded'}, {'name': '20040420 TCP Vulnerabilities in Multiple IOS-Based Cisco Products', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml'}, {'name': 'SCOSA-2005.3', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt'}, {'name': '10183', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10183'}, {'name': 'oval:org.mitre.oval:def:4791', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4791'}, {'name': 'SCOSA-2005.14', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt'}, {'name': 'oval:org.mitre.oval:def:270', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A270'}, {'name': 'tcp-rst-dos(15886)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15886'}, {'name': '4030', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4030'}, {'name': '22341', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22341'}, {'name': 'NetBSD-SA2004-006', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc'}, {'name': 'ADV-2006-3983', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/3983'}, {'name': '11458', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11458'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0230?


Explain the CVE ID: What does the identifier CVE-2004-0231 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0231.

Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."


Provide references for further information: Can you share references or external links related to CVE-2004-0231?

{'name': 'SuSE-SA:2004:012', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_12_mc.html'}, {'name': 'GLSA-200405-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-21.xml'}, {'name': 'MDKSA-2004:039', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:039'}, {'name': 'DSA-497', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-497'}, {'name': 'RHSA-2004:172', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-172.html'}, {'name': 'midnight-commander-insecure-files(16020)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16020'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0231?


Explain the CVE ID: What does the identifier CVE-2004-0232 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0232.

Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0232?

{'name': 'SuSE-SA:2004:012', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_12_mc.html'}, {'name': 'GLSA-200405-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-21.xml'}, {'name': 'midnight-commander-format-string(16021)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16021'}, {'name': 'MDKSA-2004:039', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:039'}, {'name': 'DSA-497', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-497'}, {'name': 'RHSA-2004:172', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-172.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0232?


Explain the CVE ID: What does the identifier CVE-2004-0233 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0233.

Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.


Provide references for further information: Can you share references or external links related to CVE-2004-0233?

{'name': 'MDKSA-2004:031', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:031'}, {'name': '1000752', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000752.1-1'}, {'name': 'utemper-symlink(15904)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15904'}, {'name': 'RHSA-2004:174', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-174.html'}, {'name': 'SSA:2004-110', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404389'}, {'name': 'GLSA-200405-05', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-05.xml'}, {'name': 'oval:org.mitre.oval:def:10115', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10115'}, {'name': '10178', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10178'}, {'name': 'oval:org.mitre.oval:def:979', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A979'}, {'name': 'RHSA-2004:175', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-175.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0233?


Explain the CVE ID: What does the identifier CVE-2004-0234 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0234.

Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.


Provide references for further information: Can you share references or external links related to CVE-2004-0234?

{'name': '1015866', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015866'}, {'name': 'CLA-2004:840', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840'}, {'name': '5753', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5753'}, {'name': 'oval:org.mitre.oval:def:977', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A977'}, {'name': 'FEDORA-2004-119', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-announce-list/2004-May/msg00005.html'}, {'name': '20060403 Barracuda LHA archiver security bug leads to remote compromise', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-04/0059.html'}, {'name': '10243', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10243'}, {'name': 'ADV-2006-1220', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1220'}, {'name': '20040501 LHa buffer overflows and directory traversal problems', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html'}, {'name': '19514', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19514'}, {'name': '5754', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5754'}, {'name': 'RHSA-2004:179', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-179.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guay-leroux.com/projects/barracuda-advisory-LHA.txt'}, {'name': 'FLSA:1833', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=1833'}, {'name': 'DSA-515', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-515'}, {'name': 'oval:org.mitre.oval:def:9881', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9881'}, {'name': '20040510 [Ulf Harnhammar]: LHA Advisory + Patch', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108422737918885&w=2'}, {'name': 'GLSA-200405-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-02.xml'}, {'name': 'RHSA-2004:178', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-178.html'}, {'name': 'lha-multiple-bo(16012)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16012'}, {'name': '20040502 Lha local stack overflow Proof Of Concept Code', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020778.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0234?


Explain the CVE ID: What does the identifier CVE-2004-0235 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0235.

Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").


Provide references for further information: Can you share references or external links related to CVE-2004-0235?

{'name': 'CLA-2004:840', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840'}, {'name': 'FEDORA-2004-119', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-announce-list/2004-May/msg00005.html'}, {'name': '10243', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10243'}, {'name': '20040501 LHa buffer overflows and directory traversal problems', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html'}, {'name': 'lha-directory-traversal(16013)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16013'}, {'name': 'RHSA-2004:179', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-179.html'}, {'name': 'FLSA:1833', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=1833'}, {'name': 'DSA-515', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-515'}, {'name': '20040510 [Ulf Harnhammar]: LHA Advisory + Patch', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108422737918885&w=2'}, {'name': 'GLSA-200405-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-02.xml'}, {'name': 'RHSA-2004:178', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-178.html'}, {'name': 'oval:org.mitre.oval:def:978', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A978'}, {'name': 'oval:org.mitre.oval:def:10409', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10409'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0235?


Explain the CVE ID: What does the identifier CVE-2004-0236 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0236.

SQL injection vulnerability in login.asp in thePHOTOtool allows remote attackers to gain unauthorized access via the password field.


Provide references for further information: Can you share references or external links related to CVE-2004-0236?

{'name': '20040131 Advisory !', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107576894019530&w=2'}, {'name': '1008906', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/alerts/2004/Feb/1008906.html'}, {'name': '9884', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9884'}, {'name': 'thephototool-login-sql-injection(15007)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15007'}, {'name': '6727', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6727'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0236?


Explain the CVE ID: What does the identifier CVE-2004-0237 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0237.

Directory traversal vulnerability in index.php in Aprox PHP Portal allows remote attackers to read arbitrary files via a full pathname in the show parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-0237?

{'name': 'aproxphpportal-index-directory-traversal(15014)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15014'}, {'name': '1008915', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1008915'}, {'name': '10859', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10859'}, {'name': '9540', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9540'}, {'name': '20040131 Directory Traversal in Aprox PHP Portal.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107577555527321&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0237?


Explain the CVE ID: What does the identifier CVE-2004-0238 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0238.

Multiple buffer overflows in Overkill (0verkill) 0.15pre3 might allow local users to execute arbitrary code in the client via a long HOME environment variable in the (1) load_cfg and (2) save_cfg functions; possibly allow remote attackers to execute arbitrary code via long strings to (3) the send_message function; and, in the server, via (4) the parse_command_line function.


Provide references for further information: Can you share references or external links related to CVE-2004-0238?

{'name': '20040202 0verkill - little simple vulnerability.', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016579.html'}, {'name': '20040202 0verkill - little simple vulnerability.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107577335424509&w=2'}, {'name': 'overkill-server-parsecommandline-bo(15000)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15000'}, {'name': 'overkill-client-multiple-bo(14999)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14999'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/securitynews/5AP010KC0C.html'}, {'name': '9550', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9550'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0238?


Explain the CVE ID: What does the identifier CVE-2004-0239 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0239.

SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unauthorized access via the photo variable.


Provide references for further information: Can you share references or external links related to CVE-2004-0239?

{'name': 'photopostphp-sql-injection(15008)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15008'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/securitynews/5KP010UC0W.html'}, {'name': '9557', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9557'}, {'name': '20040202 ZH2004-03SA (security advisory): Photopost PHP Pro 4.6 Sql', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107582512023998&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0239?


Explain the CVE ID: What does the identifier CVE-2004-0240 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0240.

Directory traversal vulnerability in X-Cart 3.4.3 allows remote attackers to view arbitrary files via a .. (dot dot) in the shop_closed_file argument to auth.php.


Provide references for further information: Can you share references or external links related to CVE-2004-0240?

{'name': 'xcart-dotdot-directory-traversal(15033)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15033'}, {'name': '20040203 X-Cart vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107582648326448&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0240?


Explain the CVE ID: What does the identifier CVE-2004-0241 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0241.

X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (2) general.php.


Provide references for further information: Can you share references or external links related to CVE-2004-0241?

{'name': 'xcart-perlbinary-execute-commands(15034)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15034'}, {'name': '20040203 X-Cart vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107582648326448&w=2'}, {'name': '9560', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9560'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0241?


Explain the CVE ID: What does the identifier CVE-2004-0242 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0242.

X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with (1) phpinfo command or (2) perlinfo command.


Provide references for further information: Can you share references or external links related to CVE-2004-0242?

{'name': '20040203 X-Cart vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107582648326448&w=2'}, {'name': 'xcart-generalphp-obtain-information(15036)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15036'}, {'name': '9563', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9563'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0242?


Explain the CVE ID: What does the identifier CVE-2004-0243 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0243.

AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correct, which allows remote attackers to guess the password via brute force methods.


Provide references for further information: Can you share references or external links related to CVE-2004-0243?

{'name': '20040206 AIX password enumeration possible', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2004-02/0313.html'}, {'name': '20040203 Re: sqwebmail web login', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107583269206044&w=2'}, {'name': 'aix-password-enumeration(15172)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15172'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0243?


Explain the CVE ID: What does the identifier CVE-2004-0244 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0244.

Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or OSM module allow local users to cause a denial of service (hang or reset) by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet.


Provide references for further information: Can you share references or external links related to CVE-2004-0244?

{'name': '10780', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10780'}, {'name': '9562', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9562'}, {'name': 'cisco-malformed-frame-dos(15013)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15013'}, {'name': '20040203 Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040203-cat6k.shtml'}, {'name': 'oval:org.mitre.oval:def:5828', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5828'}, {'name': 'VU#810062', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/810062'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0244?


Explain the CVE ID: What does the identifier CVE-2004-0245 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0245.

Web Crossing 4.x and 5.x allows remote attackers to cause a denial of service (crash) by sending a HTTP POST request with a large or negative Content-Length, which causes an integer divide-by-zero.


Provide references for further information: Can you share references or external links related to CVE-2004-0245?

{'name': 'webcrossing-contentlength-post-dos(15022)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15022'}, {'name': '20040203 Web Crossing 4.x/5.x Denial of Service Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107586518120516&w=2'}, {'name': '9576', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9576'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0245?


Explain the CVE ID: What does the identifier CVE-2004-0246 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0246.

Multiple PHP remote file inclusion vulnerabilities in (1) fonctions.lib.php, (2) derniers_commentaires.php, and (3) admin.php in Les Commentaires 2.0 allow remote attackers to execute arbitrary PHP code via the rep parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-0246?

{'name': '10768', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10768/'}, {'name': 'lescommentaires-multiple-file-include(15010)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15010'}, {'name': '9536', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9536'}, {'name': '20040203 Les Commentaires (PHP) Include file', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107584083719763&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0246?


Explain the CVE ID: What does the identifier CVE-2004-0247 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0247.

The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service (crash via exception) via a UDP packet with a length field that is greater than the actual data length, which causes Chaser to read unexpected memory.


Provide references for further information: Can you share references or external links related to CVE-2004-0247?

{'name': 'chaser-memory-dos(15031)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15031'}, {'name': '20040203 Remote crash of Chaser game <= 1.50', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107584109420084&w=2'}, {'name': '9567', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9567'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0247?


Explain the CVE ID: What does the identifier CVE-2004-0248 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0248.

Cross-site scripting vulnerability (XSS) in PHPX 3.2.3 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into (1) keywords argument of main.inc.php, (2) body argument of help.inc.php, or (3) the subject field in Personal Messages and Forum.


Provide references for further information: Can you share references or external links related to CVE-2004-0248?

{'name': 'phpx-main-help-xss(15051)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15051'}, {'name': 'phpx-subject-html-injection(15050)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15050'}, {'name': '9569', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9569'}, {'name': '10797', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10797/'}, {'name': '20040203 Multiple Vulnerabilities in PHPX', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107586932324901&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0248?


Explain the CVE ID: What does the identifier CVE-2004-0249 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0249.

PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable to reference another userID.


Provide references for further information: Can you share references or external links related to CVE-2004-0249?

{'name': 'phpx-cookie-account-hijacking(15052)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15052'}, {'name': 'phpx-session-hijack(15512)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15512'}, {'name': '9569', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9569'}, {'name': '10797', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10797/'}, {'name': '20040316 PHPX 2.x - 3.2.4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2004-03/0154.html'}, {'name': '20040203 Multiple Vulnerabilities in PHPX', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107586932324901&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0249?


Explain the CVE ID: What does the identifier CVE-2004-0250 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0250.

SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the product parameter in showproduct.php or (2) the cat parameter in showcat.php.


Provide references for further information: Can you share references or external links related to CVE-2004-0250?

{'name': 'photopostphp-sql-injection(15008)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15008'}, {'name': '20040204 ZH2004-04SA (security advisory): Multiple Sql Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107593114909696&w=2'}, {'name': '9557', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9557'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.org/en/advisories/read/id=3864/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0250?


Explain the CVE ID: What does the identifier CVE-2004-0251 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0251.

Cross-site scripting (XSS) vulnerability in rxgoogle.cgi allows remote attackers to execute arbitrary script as other users via the query parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-0251?

{'name': '20040204 rxgoogle.cgi XSS Vulnerability.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107594183924958&w=2'}, {'name': 'rxgoogle-query-xss(15043)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15043'}, {'name': '9575', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9575'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0251?


Explain the CVE ID: What does the identifier CVE-2004-0252 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0252.

TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service (CPU consumption) via an empty USER name.


Provide references for further information: Can you share references or external links related to CVE-2004-0252?

{'name': '20040204 TYPSoft FTP Server 1.10 may be crashed', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107591511716707&w=2'}, {'name': 'typsoft-empty-username-dos(15048)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15048'}, {'name': '9573', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9573'}, {'name': '1008943', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2004/Feb/1008943.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0252?


Explain the CVE ID: What does the identifier CVE-2004-0253 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0253.

IBM Cloudscape 5.1 running jdk 1.4.2_03 allows remote attackers to execute arbitrary programs or cause a denial of service via certain SQL code, possibly due to a SQL injection vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2004-0253?

{'name': '20040205 IBM cloudscape SQL Database (DB2J) vulnerable to remote command', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107604065819233&w=2'}, {'name': 'cloudscape-sql-injection(15067)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15067'}, {'name': '9583', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9583'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0253?


Explain the CVE ID: What does the identifier CVE-2004-0254 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0254.

Cross-site scripting (XSS) vulnerability in Discuz! Board 2.x and 3.x allows remote attackers to execute arbitrary script as other users via an img tag.


Provide references for further information: Can you share references or external links related to CVE-2004-0254?

{'name': '9584', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9584'}, {'name': 'discuzboard-image-tag-xss(15066)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15066'}, {'name': '20040205 Possible Cross Site Scripting in Discuz! Board', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107606726417150&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0254?


Explain the CVE ID: What does the identifier CVE-2004-0255 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0255.

Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . (dot) and / (slash) characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2004-0255?

{'name': '9585', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9585'}, {'name': 'xlight-long-string-dos(15064)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15064'}, {'name': '20040205 Remote crash Xlight ftp server 1.52', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107605633904122&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0255?


Explain the CVE ID: What does the identifier CVE-2004-0256 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0256.

GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp.


Provide references for further information: Can you share references or external links related to CVE-2004-0256?

{'name': '9530', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9530'}, {'name': '3795', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3795'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.geocrawler.com/mail/msg.php3?msg_id=3438808&list=405'}, {'name': 'libtool-insecure-temp-directory(15017)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15017'}, {'name': 'CLA-2004:811', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000811'}, {'name': '20040130 Symlink Vulnerability in GNU libtool <1.5.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/352333'}, {'name': '10777', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10777'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0256?


Explain the CVE ID: What does the identifier CVE-2004-0257 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0257.

OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service (crash) by sending an IPv6 packet with a small MTU to a listening port and then issuing a TCP connect to that port.


Provide references for further information: Can you share references or external links related to CVE-2004-0257?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.guninski.com/obsdmtu.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openbsd.org/cgi-bin/cvsweb/src/sys/netinet6/ip6_output.c'}, {'name': '20040205 OpenBSD IPv6 remote kernel crash', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107604603226564&w=2'}, {'name': '20040204 Remote openbsd crash with ip6, yet still openbsd much better than windows', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016704.html'}, {'name': '3825', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3825'}, {'name': 'openbsd-ipv6-dos(15044)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15044'}, {'name': '9577', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9577'}, {'name': 'NetBSD-SA2004-002', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-002.txt.asc'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0257?


Explain the CVE ID: What does the identifier CVE-2004-0258 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0258.

Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via malformed (1) .RP, (2) .RT, (3) .RAM, (4) .RPM or (5) .SMIL files.


Provide references for further information: Can you share references or external links related to CVE-2004-0258?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/realone.txt'}, {'name': 'realoneplayer-multiple-file-bo(15040)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15040'}, {'name': 'O-075', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-075.shtml'}, {'name': '20040204 [VulnWatch] Multiple File Format Vulnerabilities (Overruns) in REALOne & RealPlayer', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0027.html'}, {'name': 'VU#473814', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/473814'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.service.real.com/help/faq/security/040123_player/EN/'}, {'name': '9579', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9579'}, {'name': '20040204 Multiple File Format Vulnerabilities (Overruns) in REALOne & RealPlayer', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107608748813559&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0258?


Explain the CVE ID: What does the identifier CVE-2004-0259 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0259.

The check_referer() function in Formmail.php 5.0 and earlier allows remote attackers to bypass access restrictions via an empty or spoofed HTTP Referer, as demonstrated using an application on the same web server that contains a cross-site scripting (XSS) issue.


Provide references for further information: Can you share references or external links related to CVE-2004-0259?

{'name': '20040206 formmail (PHP) Upload file using CSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107619109629629&w=2'}, {'name': '9591', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9591'}, {'name': 'jack-formmail-file-upload(15079)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15079'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0259?


Explain the CVE ID: What does the identifier CVE-2004-0260 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0260.

The AddToMailingList function in CactuSoft CactuShop 5.0 Lite contains a backdoor that allows remote attackers to delete arbitrary files via an email address that starts with |||.


Provide references for further information: Can you share references or external links related to CVE-2004-0260?

{'name': '20040206 CactuSoft CactuShop 5.0 Lite shopping cart software backdoor', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107619501815888&w=2'}, {'name': 'cactushoplite-backdoor(15063)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15063'}, {'name': '9589', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9589'}, {'name': '20040206 CactuSoft CactuShop 5.0 Lite shopping cart software backdoor', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016819.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0260?


Explain the CVE ID: What does the identifier CVE-2004-0261 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0261.

oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and access the control panel via a 0 in the uid parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-0261?

{'name': '20040206 Open Journal Blog Authenticaion Bypassing Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107619136600713&w=2'}, {'name': 'openjournal-uid-admin-access(15069)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15069'}, {'name': '3872', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3872'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.grohol.com/downloads/oj/latest/changelog.txt'}, {'name': '9598', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9598'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0261?


Explain the CVE ID: What does the identifier CVE-2004-0262 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0262.

Stack-based buffer overflow in The Palace 3.5 and earlier client allows remote attackers to execute arbitrary code via a link to a palace:// url followed by a long server address string.


Provide references for further information: Can you share references or external links related to CVE-2004-0262?

{'name': '9602', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9602'}, {'name': 'palace-server-address-bo(15074)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15074'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.elitehaven.net/thepalace.txt'}, {'name': '20040207 The Palace 3.x (Client) Stack Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107634556632195&w=2'}, {'name': '20040207 The Palace 3.x (Client) Stack Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0033.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0262?


Explain the CVE ID: What does the identifier CVE-2004-0263 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0263.

PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information.


Provide references for further information: Can you share references or external links related to CVE-2004-0263?

{'name': '3878', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3878'}, {'name': '9599', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9599'}, {'name': 'php-virtualhost-info-disclosure(15072)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15072'}, {'name': 'GLSA-200402-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200402-01.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0263?


Explain the CVE ID: What does the identifier CVE-2004-0264 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0264.

palmhttpd for PalmOS allows remote attackers to cause a denial of service (crash) by establishing two simultaneous HTTP connections, which exceeds the PalmOS accept queue.


Provide references for further information: Can you share references or external links related to CVE-2004-0264?

{'name': 'palmhttpd-accept-bo(15090)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15090'}, {'name': '9608', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9608'}, {'name': '20040208 PalmOS httpd accept() queue overflow DoS vulnerability.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107634638201570&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0264?


Explain the CVE ID: What does the identifier CVE-2004-0265 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0265.

Cross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows remote attackers to execute arbitrary script as other users via URL-encoded (1) title or (2) fname parameters in the News or Reviews modules.


Provide references for further information: Can you share references or external links related to CVE-2004-0265?

{'name': '20040208 [waraxe-2004-SA#002] - Cross-Site Scripting (XSS) in Php-Nuke 7.1.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107634727520936&w=2'}, {'name': '9605', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9605'}, {'name': 'phpnuke-mulitple-xss(15076)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15076'}, {'name': '9613', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9613'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0265?


Explain the CVE ID: What does the identifier CVE-2004-0266 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0266.

SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x to 7.1.0 allows remote attackers to obtain the administrator password via the c_mid parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-0266?

{'name': 'phpnuke-publicmessage-sql-injection(15080)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15080'}, {'name': '9615', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9615'}, {'name': '20040208 [waraxe-2004-SA#003] - SQL injection in Php-Nuke 7.1.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107635110327066&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0266?


Explain the CVE ID: What does the identifier CVE-2004-0267 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0267.

The (1) inoregupdate, (2) uniftest, or (3) unimove scripts in eTrust InoculateIT for Linux 6.0 allow local users to overwrite arbitrary files via a symlink attack on files in /tmp.


Provide references for further information: Can you share references or external links related to CVE-2004-0267?

{'name': '10833', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10833'}, {'name': '4735', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4735'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.excluded.org/advisories/advisory10.txt'}, {'name': '20040209 [local problems] eTrust Virus Protection 6.0 InoculateIT for linux', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107635584431518&w=2'}, {'name': 'etrust-inoculateit-symlink(15102)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15102'}, {'name': '9616', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9616'}, {'name': '4855', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4855'}, {'name': '4856', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4856'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0267?


Explain the CVE ID: What does the identifier CVE-2004-0268 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0268.

Multiple buffer overflows in EvolutionX 3921 and 3935 allow remote attackers to cause a denial of service (hang) via (1) a long cd command to the FTP server, or (2) a long dir command to the telnet server.


Provide references for further information: Can you share references or external links related to CVE-2004-0268?

{'name': 'evolutionx-command-line-dos(15104)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15104'}, {'name': "20040210 XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow", 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016988.html'}, {'name': "20040210 XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107643394724891&w=2'}, {'name': '9631', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9631'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0268?


Explain the CVE ID: What does the identifier CVE-2004-0269 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0269.

SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module.


Provide references for further information: Can you share references or external links related to CVE-2004-0269?

{'name': '9630', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9630'}, {'name': '20040210 [SCAN Associates Sdn Bhd Security Advisory] PHPNuke 6.9 > and below SQL Injection in multiple module', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107643348117646&w=2'}, {'name': 'phpnuke-modules-sql-injection(15115)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15115'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.scan-associates.net/papers/phpnuke69.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0269?


Explain the CVE ID: What does the identifier CVE-2004-0270 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0270.

libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid line length (e.g., a lowercase character), which causes an assert error in clamd that terminates the calling program.


Provide references for further information: Can you share references or external links related to CVE-2004-0270?

{'name': 'GLSA-200402-07', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200402-07.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.freebsd.org/cgi/query-pr.cgi?pr=62586'}, {'name': '9610', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9610'}, {'name': '20040209 clamav 0.65 remote DOS exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107634700823822&w=2'}, {'name': '3894', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3894'}, {'name': 'clam-antivirus-uuencoded-dos(15077)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15077'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0270?


Explain the CVE ID: What does the identifier CVE-2004-0271 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0271.

Multiple cross-site scripting vulnerabilities (XSS) in MaxWebPortal allow remote attackers to execute arbitrary web script as other users via (1) the sub_name parameter of dl_showall.asp, (2) the SendTo parameter in Personal Messages, (3) the HTTP_REFERER for down.asp, or (4) the image name of an Avatar in the register form.


Provide references for further information: Can you share references or external links related to CVE-2004-0271?

{'name': '20040210 XSS, Sql Injection and Avatar ScriptCode Injection in MaxWebPortal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107643014606515&w=2'}, {'name': '9625', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9625'}, {'name': 'maxwebportal-register-xss(15122)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15122'}, {'name': 'maxwebportal-multiple-xss(15120)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15120'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0271?


Explain the CVE ID: What does the identifier CVE-2004-0272 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0272.

SQL injection vulnerability in MaxWebPortal allows remote attackers to inject arbitrary SQL code and gain sensitive information via the SendTo parameter in Personal Messages.


Provide references for further information: Can you share references or external links related to CVE-2004-0272?

{'name': '20040210 XSS, Sql Injection and Avatar ScriptCode Injection in MaxWebPortal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107643014606515&w=2'}, {'name': '9625', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9625'}, {'name': 'maxwebportal-personalmesssages-sql-injection(15121)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15121'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0272?


Explain the CVE ID: What does the identifier CVE-2004-0273 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0273.

Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via an RMP file that contains .. (dot dot) sequences in a .rjs skin file.


Provide references for further information: Can you share references or external links related to CVE-2004-0273?

{'name': 'VU#514734', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/514734'}, {'name': 'realoneplayer-rmp-directory-traversal(15123)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15123'}, {'name': '20040210 Directory traversal in RealPlayer allows code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107642978524321&w=2'}, {'name': '9580', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9580'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://service.real.com/help/faq/security/040123_player/EN/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0273?


Explain the CVE ID: What does the identifier CVE-2004-0274 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0274.

Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STAT_OFFERED status to a bot that is not a sharebot, which allows remote attackers to use STAT_OFFERED to promote a bot to a sharebot and conduct unauthorized activities.


Provide references for further information: Can you share references or external links related to CVE-2004-0274?

{'name': '20040210 Re: Eggrop bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107643315623958&w=2'}, {'name': '20040208 Eggrop bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107634593827102&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://mogan.nonsoloirc.com/egg_advisory.txt'}, {'name': '9606', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9606'}, {'name': '3928', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3928'}, {'name': 'eggdrop-sharemod-gain-access(15084)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15084'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.eggheads.org/news/2004/04/10/26'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0274?


Explain the CVE ID: What does the identifier CVE-2004-0275 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0275.

SQL injection vulnerability in calendar_download.php in BosDates 3.2 and earlier allows remote attackers to obtain sensitive information and gain access via the calendar parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-0275?

{'name': '20040211 ZH2004-05SA (security advisory): Sql Injection Vulnerability in BosDates', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107651618613575&w=2'}, {'name': '9639', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9639'}, {'name': 'bosdates-calendar-sql-injection(15133)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15133'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.org/en/advisories/read/id=3925/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0275?


Explain the CVE ID: What does the identifier CVE-2004-0276 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0276.

The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request with a sequence of "%" characters and a missing Host field.


Provide references for further information: Can you share references or external links related to CVE-2004-0276?

{'name': 'monkey-getrealstring-dos(15187)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15187'}, {'name': '20040211 Denial of Service in Monkey httpd <= 0.8.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107652610506968&w=2'}, {'name': '9642', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9642'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/poc/monkeydos.zip'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://monkeyd.sourceforge.net/'}, {'name': '3921', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3921'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0276?


Explain the CVE ID: What does the identifier CVE-2004-0277 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0277.

Format string vulnerability in Dream FTP 1.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the username.


Provide references for further information: Can you share references or external links related to CVE-2004-0277?

{'name': '9600', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9600'}, {'name': 'dreamftp-username-format-string(15070)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15070'}, {'name': '20040211 Re: [Full-Disclosure] DreamFTP Server 1.02 Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107656166402882&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/modules.php?name=News&file=article&sid=1722'}, {'name': '20040207 DreamFTP Server 1.02 Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016871.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0277?


Explain the CVE ID: What does the identifier CVE-2004-0278 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0278.

Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data than specified, which causes Ratbag to repeatedly check the socket for more data.