Provide references for further information: Can you share references or external links related to CVE-2004-0598?

{'name': '2004-0040', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.net/errata/2004/0040/'}, {'name': '200663', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-200663-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html'}, {'name': 'RHSA-2004:402', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-402.html'}, {'name': 'oval:org.mitre.oval:def:10203', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10203'}, {'name': 'GLSA-200408-22', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-22.xml'}, {'name': '22958', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22958'}, {'name': 'FLSA:1943', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=1943'}, {'name': 'SCOSA-2004.16', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'http://marc.info/?l=bugtraq&m=109761239318458&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://scary.beasts.org/security/CESA-2004-001.txt'}, {'name': 'RHSA-2004:429', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-429.html'}, {'name': 'DSA-536', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-536'}, {'name': 'APPLE-SA-2004-09-09', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00056.html'}, {'name': '20040804 [OpenPKG-SA-2004.035] OpenPKG Security Advisory (png)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109163866717909&w=2'}, {'name': 'SSRT4778', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=109181639602978&w=2'}, {'name': 'MDKSA-2006:213', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:213'}, {'name': 'TA04-217A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-217A.html'}, {'name': 'MDKSA-2006:212', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:212'}, {'name': 'libpng-pnghandleiccp-dos(16895)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16895'}, {'name': 'VU#236656', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/236656'}, {'name': 'CLA-2004:856', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000856'}, {'name': '10857', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10857'}, {'name': 'oval:org.mitre.oval:def:2572', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2572'}, {'name': 'SUSE-SA:2004:023', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_23_libpng.html'}, {'name': 'GLSA-200408-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-03.xml'}, {'name': 'MDKSA-2004:079', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:079'}, {'name': '22957', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22957'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0598?


Explain the CVE ID: What does the identifier CVE-2004-0599 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0599.

Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.


Provide references for further information: Can you share references or external links related to CVE-2004-0599?

{'name': '2004-0040', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.net/errata/2004/0040/'}, {'name': 'VU#477512', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/477512'}, {'name': '200663', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-200663-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html'}, {'name': 'oval:org.mitre.oval:def:1479', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1479'}, {'name': 'SCOSA-2005.49', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt'}, {'name': 'RHSA-2004:421', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-421.html'}, {'name': 'RHSA-2004:402', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-402.html'}, {'name': 'GLSA-200408-22', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-22.xml'}, {'name': '22958', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22958'}, {'name': 'FLSA:2089', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=109900315219363&w=2'}, {'name': 'FLSA:1943', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=1943'}, {'name': 'lilbpng-integer-bo(16896)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16896'}, {'name': 'SCOSA-2004.16', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'http://marc.info/?l=bugtraq&m=109761239318458&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://scary.beasts.org/security/CESA-2004-001.txt'}, {'name': 'RHSA-2004:429', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-429.html'}, {'name': '15495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/15495'}, {'name': 'DSA-536', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-536'}, {'name': 'oval:org.mitre.oval:def:10938', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10938'}, {'name': 'APPLE-SA-2004-09-09', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00056.html'}, {'name': '20040804 [OpenPKG-SA-2004.035] OpenPKG Security Advisory (png)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109163866717909&w=2'}, {'name': 'DSA-570', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-570'}, {'name': 'SSRT4778', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=109181639602978&w=2'}, {'name': 'MDKSA-2006:213', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:213'}, {'name': 'TA04-217A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-217A.html'}, {'name': 'MDKSA-2006:212', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:212'}, {'name': 'DSA-571', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-571'}, {'name': 'CLA-2004:856', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000856'}, {'name': '10857', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10857'}, {'name': 'SUSE-SA:2004:023', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_23_libpng.html'}, {'name': 'GLSA-200408-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-03.xml'}, {'name': 'VU#160448', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/160448'}, {'name': 'MDKSA-2004:079', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:079'}, {'name': 'VU#286464', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/286464'}, {'name': '22957', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22957'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0599?


Explain the CVE ID: What does the identifier CVE-2004-0600 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0600.

Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.


Provide references for further information: Can you share references or external links related to CVE-2004-0600?

{'name': '2004-0039', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0039/'}, {'name': 'samba-swat-base64-bo(16785)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16785'}, {'name': 'CLA-2004:851', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000851'}, {'name': 'RHSA-2004:259', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-259.html'}, {'name': '20040722 TSSA-2004-014 - samba', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109052891507263&w=2'}, {'name': 'CLA-2004:854', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000854'}, {'name': '20040722 [OpenPKG-SA-2004.033] OpenPKG Security Advisory (samba)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109051533021376&w=2'}, {'name': 'oval:org.mitre.oval:def:11445', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11445'}, {'name': 'SUSE-SA:2004:022', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_22_samba.html'}, {'name': '20040722 Security Release - Samba 3.0.5 and 2.2.10', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109051340810458&w=2'}, {'name': '20040722 SWAT PreAuthorization PoC', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109053195818351&w=2'}, {'name': 'MDKSA-2004:071', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071'}, {'name': 'GLSA-200407-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml'}, {'name': '20040722 Samba 3.x swat preauthentication buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109052647928375&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0600?


Explain the CVE ID: What does the identifier CVE-2004-0601 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0601.

distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which could allow remote attackers to bypass intended restrictions.


Provide references for further information: Can you share references or external links related to CVE-2004-0601?

{'name': 'distcc-ip-gain-privileges(17581)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17581'}, {'name': '12711', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12711/'}, {'name': '11319', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11319'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://distcc.samba.org/ftp/distcc/distcc-2.17.NEWS'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0601?


Explain the CVE ID: What does the identifier CVE-2004-0602 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0602.

The binary compatibility mode for FreeBSD 4.x and 5.x does not properly handle certain Linux system calls, which could allow local users to access kernel memory to gain privileges or cause a system panic.


Provide references for further information: Can you share references or external links related to CVE-2004-0602?

{'name': '10643', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10643'}, {'name': 'freebsd-binary-information-disclosure(16558)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16558'}, {'name': 'FreeBSD-SA-04:13', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:13.linux.asc'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0602?


Explain the CVE ID: What does the identifier CVE-2004-0603 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0603.

gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users to execute arbitrary commands, a different vulnerability than CVE-1999-1332.


Provide references for further information: Can you share references or external links related to CVE-2004-0603?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=54890'}, {'name': 'gzip-gzexe-tmpfile(16506)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16506'}, {'name': 'GLSA-200406-18', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200406-18.xml'}, {'name': '10603', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10603'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0603?


Explain the CVE ID: What does the identifier CVE-2004-0604 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0604.

The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service (crash), possibly via an empty search query, which triggers a NULL dereference.


Provide references for further information: Can you share references or external links related to CVE-2004-0604?

{'name': 'GLSA-200406-19', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200406-19.xml'}, {'name': '11941', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11941/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://developer.berlios.de/bugs/?func=detailbug&bug_id=1573&group_id=809'}, {'name': 'gift-fasttrack-daemon-dos(16508)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16508'}, {'name': '10604', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10604'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gift-fasttrack.berlios.de/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0604?


Explain the CVE ID: What does the identifier CVE-2004-0605 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0605.

Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote attackers to cause a denial of service by repeatedly making requests, which are slowly dequeued.


Provide references for further information: Can you share references or external links related to CVE-2004-0605?

{'name': 'ircd-parseclientqueued-dos(16457)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16457'}, {'name': '10572', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10572'}, {'name': '20040618 ircd-hybrid-7 / ircd-ratbox low-bandwidth DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108766803817406&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0605?


Explain the CVE ID: What does the identifier CVE-2004-0606 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0606.

Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the (1) CLIENTID or (2) HOSTNAME option of a DHCP request.


Provide references for further information: Can you share references or external links related to CVE-2004-0606?

{'name': 'dnsone-dhcp-report-xss(16456)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16456'}, {'name': '10573', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10573'}, {'name': '20040619 Script injection in DNSONE appliance', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108769996925349&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0606?


Explain the CVE ID: What does the identifier CVE-2004-0607 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0607.

The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.


Provide references for further information: Can you share references or external links related to CVE-2004-0607?

{'name': "20040615 Re: authentication bug in KAME's racoon", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108731967126033&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=245982'}, {'name': '7113', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7113'}, {'name': '11877', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11877'}, {'name': "20040614 authentication bug in KAME's racoon", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108726102304507&w=2'}, {'name': 'racoon-eaycheckx509cert-auth-bypass(16414)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16414'}, {'name': 'RHSA-2004:308', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-308.html'}, {'name': 'SCOSA-2005.10', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt'}, {'name': 'oval:org.mitre.oval:def:9163', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9163'}, {'name': '1010495', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010495'}, {'name': '11863', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11863'}, {'name': '10546', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10546'}, {'name': 'GLSA-200406-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200406-17.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0607?


Explain the CVE ID: What does the identifier CVE-2004-0608 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0608.

The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP 7710 and earlier, Unreal Tournament 451b and earlier, Unreal Tournament 2003 2225 and earlier, Unreal Tournament 2004 before 3236, Wheel of Time 333b and earlier, and X-com Enforcer, allows remote attackers to execute arbitrary code via a UDP packet containing a secure query with a long value, which overwrites memory.


Provide references for further information: Can you share references or external links related to CVE-2004-0608?

{'name': '10570', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10570'}, {'name': 'GLSA-200407-14', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200407-14.xml'}, {'name': '20040618 Code execution in the Unreal Engine through \\secure\\ packet', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108787105023304&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/unsecure-adv.txt'}, {'name': 'unreal-secure-query-command-execute(16451)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16451'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0608?


Explain the CVE ID: What does the identifier CVE-2004-0609 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0609.

rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authenticated users to determine the existence of files in a directory outside the jail.


Provide references for further information: Can you share references or external links related to CVE-2004-0609?

{'name': '10574', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10574'}, {'name': '20040619 Security flaw in rssh', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108787373022844&w=2'}, {'name': 'rssh-jail-obtain-info(16470)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16470'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0609?


Explain the CVE ID: What does the identifier CVE-2004-0610 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0610.

The Web administration interface in Microsoft MN-500 Wireless Router allows remote attackers to cause a denial of service (connection refusal) via a large number of open HTTP connections.


Provide references for further information: Can you share references or external links related to CVE-2004-0610?

{'name': '10585', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10585'}, {'name': '20040621 Microsoft MN-500 Wireless Router Web-Based Administration DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108796481501258&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.kurczaba.com/securityadvisories/0406213.htm'}, {'name': 'mn500-web-admin-dos(16448)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16448'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0610?


Explain the CVE ID: What does the identifier CVE-2004-0611 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0611.

Web-Based Administration in Netgear FVS318 VPN Router allows remote attackers to cause a denial of service (no new connections) via a large number of open HTTP connections.


Provide references for further information: Can you share references or external links related to CVE-2004-0611?

{'name': '20040621 NETGEAR FVS318 Web-Based Administration DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108787199201059&w=2'}, {'name': '10585', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10585'}, {'name': 'netgear-fvs318-dos(16462)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16462'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0611?


Explain the CVE ID: What does the identifier CVE-2004-0612 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0612.

The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL encrypted session, which could allow remote attackers to bypass the mobile code filtering.  NOTE: it has been disputed by the vendor that this behavior is required by the SSL specification.


Provide references for further information: Can you share references or external links related to CVE-2004-0612?

{'name': "20040621 ZoneAlarm Pro 'Mobile Code' Bypass Vulnerability", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108786444608208&w=2'}, {'name': 'zonealarm-mobile-code-bypass(16471)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16471'}, {'name': '20040625 Zone Labs response to "ZoneAlarm Pro \'Mobile Code\' Bypass Vulnerability"', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2004-06/0420.html'}, {'name': '10584', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10584'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0612?


Explain the CVE ID: What does the identifier CVE-2004-0613 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0613.

osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a PHP file to the ticket attachments directory.


Provide references for further information: Can you share references or external links related to CVE-2004-0613?

{'name': '20040621 Multiple osTicket exploits!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108786779500957&w=2'}, {'name': 'osticket-view-attachments(16478)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16478'}, {'name': '10586', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10586'}, {'name': 'osticket-php-file-upload(16477)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16477'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0613?


Explain the CVE ID: What does the identifier CVE-2004-0614 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0614.

osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote attackers to upload a file of any size.


Provide references for further information: Can you share references or external links related to CVE-2004-0614?

{'name': '20040621 Multiple osTicket exploits!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108786779500957&w=2'}, {'name': 'osticket-php-file-upload(16477)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16477'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0614?


Explain the CVE ID: What does the identifier CVE-2004-0615 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0615.

Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request.


Provide references for further information: Can you share references or external links related to CVE-2004-0615?

{'name': '10587', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10587'}, {'name': '11919', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11919'}, {'name': '7211', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7211'}, {'name': '20040621 DLINK 614+, script injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108786257609932&w=2'}, {'name': 'dlink614-dhcp-xss(16468)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16468'}, {'name': '20040621 DLINK 704, script injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108797273127182&w=2'}, {'name': '20040701 DLINK 624, script injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2004-07/0014.html'}, {'name': '1010562', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010562'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0615?


Explain the CVE ID: What does the identifier CVE-2004-0616 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0616.

The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obtain sensitive information such as the password, which is stored in plaintext.


Provide references for further information: Can you share references or external links related to CVE-2004-0616?

{'name': 'bt-voyager-password-plaintext(16472)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16472'}, {'name': '10589', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10589'}, {'name': '20040622 Wireless Modem (BT Voyager 2000 Wireless ADSL Router cleartext password)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0710.html'}, {'name': '20040622 Wireless Modem (BT Voyager 2000 Wireless ADSL Router cleartext password)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108794963119034&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0616?


Explain the CVE ID: What does the identifier CVE-2004-0617 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0617.

Cross-site scripting (XSS) vulnerability in ArbitroWeb 0.6 allows remote attackers to inject arbitrary script or HTML via the rawURL parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-0617?

{'name': '10592', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10592'}, {'name': '20040622 ArbitroWeb v0.6 Javascript injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108794392303244&w=2'}, {'name': 'arbitroweb-rawurl-xss(16481)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16481'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0617?


Explain the CVE ID: What does the identifier CVE-2004-0618 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0618.

FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via an execve system call with an unaligned memory address as an argument.


Provide references for further information: Can you share references or external links related to CVE-2004-0618?

{'name': '10596', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10596'}, {'name': 'freebsd-execve-dos(16499)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16499'}, {'name': '20040623 Security Advisory : FreeBSD local DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108816603102865&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0618?


Explain the CVE ID: What does the identifier CVE-2004-0619 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0619.

Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a negative add_dsa_buf_bytes variable, which leads to a buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2004-0619?

{'name': '20040623 Linux Broadcom 5820 Cryptonet Driver Integer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108802653409053&w=2'}, {'name': 'RHSA-2005:283', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-283.html'}, {'name': 'RHSA-2004:549', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-549.html'}, {'name': 'P-047', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-047.shtml'}, {'name': '10599', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10599'}, {'name': 'oval:org.mitre.oval:def:9773', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9773'}, {'name': '11936', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11936'}, {'name': 'bcm5820-adddsabufbytes-integer-bo(16459)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16459'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0619?


Explain the CVE ID: What does the identifier CVE-2004-0620 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0620.

Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote attackers to inject arbitrary HTML or script as other users via the Edit-panel.


Provide references for further information: Can you share references or external links related to CVE-2004-0620?

{'name': 'vbulletin-newreply-newthread-xss(16502)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16502'}, {'name': '10602', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10602'}, {'name': '20040624 vBulletin HTML Injection Vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108809720026642&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0620?


Explain the CVE ID: What does the identifier CVE-2004-0621 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0621.

admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a list_user operation with the ulevel parameter set to 1 (administrator level), which lists all users and their passwords.


Provide references for further information: Can you share references or external links related to CVE-2004-0621?

{'name': 'zws-gain-admin-access(16507)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16507'}, {'name': '20040624 ZWS Newsletter & Mailing List Manager', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108811585025216&w=2'}, {'name': '10605', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10605'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0621?


Explain the CVE ID: What does the identifier CVE-2004-0622 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0622.

Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindow.app), Keychain, or FileVault passwords, which could allow the root user or an attacker with physical access to obtain sensitive information by reading memory.


Provide references for further information: Can you share references or external links related to CVE-2004-0622?

{'name': '20040625 Mac OS X stores login/Keychain/FileVault passwords on disk', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108819559925981&w=2'}, {'name': '20080228 Loginwindow.app and Mac OS X', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/488930/100/100/threaded'}, {'name': 'macos-memory-view-passwords(16557)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16557'}, {'name': '20080229 Re: Loginwindow.app and Mac OS X', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/488948/100/100/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://citp.princeton.edu/pub/coldboot.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0622?


Explain the CVE ID: What does the identifier CVE-2004-0623 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0623.

Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.


Provide references for further information: Can you share references or external links related to CVE-2004-0623?

{'name': '20040625 format string vulnerability in Gnats', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108820000823191&w=2'}, {'name': 'gnats-format-string(16517)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16517'}, {'name': '10609', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10609'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0623?


Explain the CVE ID: What does the identifier CVE-2004-0624 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0624.

PHP remote file inclusion vulnerability in index.php for Artmedic links 5.0 (artmedic_links5) allows remote attackers to execute arbitrary PHP code by modifying the id parameter to reference a URL on a remote web server that contains the code.


Provide references for further information: Can you share references or external links related to CVE-2004-0624?

{'name': 'artmedic-url-file-disclosure(16518)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16518'}, {'name': '20040625 artmedic_links5 PHP Script (include path) vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108820257812904&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0624?


Explain the CVE ID: What does the identifier CVE-2004-0625 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0625.

SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication and gain privileges via the login page.


Provide references for further information: Can you share references or external links related to CVE-2004-0625?

{'name': '20040627 ZH2004-14SA (security advisory):Sql Injection in Infinity WEB', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0893.html'}, {'name': '20040627 ZH2004-14SA (security advisory):Sql Injection in Infinity WEB', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108844087931959&w=2'}, {'name': 'infinity-web-sql-injection(16513)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16513'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.org/en/advisories/read/id=4892/'}, {'name': '10614', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10614'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0625?


Explain the CVE ID: What does the identifier CVE-2004-0626 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0626.

The tcp_find_option function of the netfilter subsystem in Linux kernel 2.6, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a large option length that produces a negative integer after a casting operation to the char type.


Provide references for further information: Can you share references or external links related to CVE-2004-0626?

{'name': 'FEDORA-2004-202', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lwn.net/Articles/91964/'}, {'name': 'GLSA-200407-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200407-12.xml'}, {'name': '20040630 Remote DoS vulnerability in Linux kernel 2.6.x', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108861141304495&w=2'}, {'name': 'linux-tcpfindoption-dos(16554)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16554'}, {'name': 'CLA-2004:852', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852'}, {'name': 'SUSE-SA:2004:020', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_20_kernel.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0626?


Explain the CVE ID: What does the identifier CVE-2004-0627 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0627.

The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string.


Provide references for further information: Can you share references or external links related to CVE-2004-0627?

{'name': 'VU#184030', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/184030'}, {'name': '20040705 MySQL Authentication Bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108904917528205&w=2'}, {'name': '20040705 MySQL Authentication Bypass', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0627?


Explain the CVE ID: What does the identifier CVE-2004-0628 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0628.

Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long scramble string.


Provide references for further information: Can you share references or external links related to CVE-2004-0628?

{'name': '20040705 MySQL Authentication Bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108904917528205&w=2'}, {'name': '20040705 MySQL Authentication Bypass', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.html'}, {'name': 'VU#645326', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/645326'}, {'name': 'mysql-myrnd-bo(16612)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16612'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0628?


Explain the CVE ID: What does the identifier CVE-2004-0629 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0629.

Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote attackers to execute arbitrary code via a URI for a PDF file with a null terminator (%00) followed by a long string.


Provide references for further information: Can you share references or external links related to CVE-2004-0629?

{'name': '20040813 Adobe Acrobat/Acrobat Reader ActiveX Control Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=126&type=vulnerabilities'}, {'name': '10947', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10947'}, {'name': 'acrobat-reader-activex-bo(16998)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16998'}, {'name': 'GLSA-200408-14', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-14.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/330527.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0629?


Explain the CVE ID: What does the identifier CVE-2004-0630 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0630.

The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters ("`" or backtick) in the filename of the PDF file that is provided to the uudecode command.


Provide references for further information: Can you share references or external links related to CVE-2004-0630?

{'name': 'RHSA-2004:432', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-432.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/322914.html'}, {'name': '20040812 Adobe Acrobat Reader (Unix) Shell Metacharacter Code Execution Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=124&type=vulnerabilities'}, {'name': '10931', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10931'}, {'name': 'GLSA-200408-14', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200408-14.xml'}, {'name': 'acrobat-reader-execute-code(16973)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16973'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0630?


Explain the CVE ID: What does the identifier CVE-2004-0631 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0631.

Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via a long filename for the PDF file that is provided to the uudecode command.


Provide references for further information: Can you share references or external links related to CVE-2004-0631?

{'name': 'adobe-acrobat-uudecode-bo(16972)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16972'}, {'name': '10932', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10932'}, {'name': 'RHSA-2004:432', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-432.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/322914.html'}, {'name': '20040812 Adobe Acrobat Reader (Unix) 5.0 Uudecode Filename Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=125&type=vulnerabilities'}, {'name': 'GLSA-200408-14', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200408-14.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0631?


Explain the CVE ID: What does the identifier CVE-2004-0632 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0632.

Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader, triggering a buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2004-0632?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.adobe.com/support/techdocs/34222.htm'}, {'name': '20040712 Adobe Reader 6.0 Filename Handler Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=116&type=vulnerabilities'}, {'name': 'adobe-acrobat-null-bo(16667)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16667'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/330527.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0632?


Explain the CVE ID: What does the identifier CVE-2004-0633 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0633.

The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer overflow.


Provide references for further information: Can you share references or external links related to CVE-2004-0633?

{'name': '1010655', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010655'}, {'name': 'CLA-2005:916', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916'}, {'name': 'MDKSA-2004:067', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:067'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00015.html'}, {'name': 'VU#829422', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/829422'}, {'name': '12024', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12024'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381'}, {'name': 'ethereal-isns-dos(16630)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16630'}, {'name': 'FEDORA-2004-219', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00013.html'}, {'name': 'FEDORA-2004-220', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00014.html'}, {'name': 'RHSA-2004:378', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-378.html'}, {'name': 'oval:org.mitre.oval:def:9931', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9931'}, {'name': 'GLSA-200407-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200407-08.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0633?


Explain the CVE ID: What does the identifier CVE-2004-0634 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0634.

The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes a null dereference.


Provide references for further information: Can you share references or external links related to CVE-2004-0634?

{'name': 'oval:org.mitre.oval:def:10252', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10252'}, {'name': '1010655', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010655'}, {'name': 'CLA-2005:916', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916'}, {'name': 'MDKSA-2004:067', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:067'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00015.html'}, {'name': '12024', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12024'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381'}, {'name': 'FEDORA-2004-219', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00013.html'}, {'name': 'ethereal-smb-sid-dos(16631)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16631'}, {'name': 'VU#518782', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/518782'}, {'name': 'FEDORA-2004-220', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00014.html'}, {'name': 'RHSA-2004:378', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-378.html'}, {'name': 'GLSA-200407-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200407-08.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0634?


Explain the CVE ID: What does the identifier CVE-2004-0635 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0635.

The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malformed or (2) missing community string, which causes an out-of-bounds read.


Provide references for further information: Can you share references or external links related to CVE-2004-0635?

{'name': '1010655', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010655'}, {'name': 'CLA-2005:916', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916'}, {'name': 'MDKSA-2004:067', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:067'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00015.html'}, {'name': '12024', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12024'}, {'name': 'oval:org.mitre.oval:def:9721', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9721'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381'}, {'name': 'FEDORA-2004-219', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00013.html'}, {'name': 'ethereal-snmp-community-dos(16632)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16632'}, {'name': 'FEDORA-2004-220', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00014.html'}, {'name': 'DSA-528', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-528'}, {'name': 'VU#835846', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/835846'}, {'name': 'RHSA-2004:378', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-378.html'}, {'name': 'GLSA-200407-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200407-08.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0635?


Explain the CVE ID: What does the identifier CVE-2004-0636 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0636.

Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.


Provide references for further information: Can you share references or external links related to CVE-2004-0636?

{'name': 'VU#735966', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/735966'}, {'name': 'aim-away-bo(16926)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16926'}, {'name': '12198', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12198/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/application/poi/display?id=121&type=vulnerabilities'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0636?


Explain the CVE ID: What does the identifier CVE-2004-0637 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0637.

Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload package, which is publicly accessible.


Provide references for further information: Can you share references or external links related to CVE-2004-0637?

{'name': '11099', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11099'}, {'name': '20040902 Oracle Database Server ctxsys.driload Access Validation Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=136&type=vulnerabilities&flashstatus=true'}, {'name': 'VU#316206', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/316206'}, {'name': '12409', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12409/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0637?


Explain the CVE ID: What does the identifier CVE-2004-0638 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0638.

Buffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for Oracle 9i Database Server Release 2 9.2.0.3 and 9.2.0.4, 9i Release 1 9.0.1.4 and 9.0.1.5, and 8i Release 1 8.1.7.4, allows remote authorized users to execute arbitrary code via a long second argument.


Provide references for further information: Can you share references or external links related to CVE-2004-0638?

{'name': 'oracle-dbmssystem-bo(17254)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17254'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf'}, {'name': '20040902 Oracle Database Server dbms_system.ksdwrt Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=135&type=vulnerabilities&flashstatus=false'}, {'name': '11100', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11100'}, {'name': '20040905 Buffer Overflow in DBMS_SYSTEM.KSDWRT() in Oracle8i - 9i', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0178.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.red-database-security.com/advisory/advisory_20040903_3.htm'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0638?


Explain the CVE ID: What does the identifier CVE-2004-0639 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0639.

Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via (1) the $mailer variable in read_body.php, (2) the $senderNames_part variable in mailbox_display.php, and possibly other vectors including (3) the $event_title variable or (4) the $event_text variable.


Provide references for further information: Can you share references or external links related to CVE-2004-0639?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.rs-labs.com/adv/RS-Labs-Advisory-2004-1.txt'}, {'name': 'squirrelmail-from-header-xss(16285)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16285'}, {'name': '20040530 RS-2004-1: SquirrelMail "Content-Type" XSS vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108611554415078&w=2'}, {'name': 'DSA-535', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-535'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=257973'}, {'name': 'CLA-2004:858', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858'}, {'name': '10450', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10450'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0639?


Explain the CVE ID: What does the identifier CVE-2004-0640 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0640.

Format string vulnerability in the SSL_set_verify function in telnetd.c for SSLtelnet daemon (SSLtelnetd) 0.13 allows remote attackers to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0640?

{'name': 'ssltelnetd-format-string(16653)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16653'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/application/poi/display?id=114&type=vulnerabilities'}, {'name': 'DSA-529', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-529'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0640?


Explain the CVE ID: What does the identifier CVE-2004-0641 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0641.

Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.


Provide references for further information: Can you share references or external links related to CVE-2004-0641?

{'name': 'speedtouch-hijack-connection(16919)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16919'}, {'name': 'ESB-2004.0504', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4299'}, {'name': '10881', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10881'}, {'name': '20040805 Thompson SpeedTouch Home ADSL Modem Predictable TCP ISN Generation', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=120&type=vulnerabilities&flashstatus=true'}, {'name': '12238', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12238/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0641?


Explain the CVE ID: What does the identifier CVE-2004-0642 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0642.

Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow remote attackers to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0642?

{'name': 'VU#795632', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/795632'}, {'name': 'CLA-2004:860', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860'}, {'name': 'oval:org.mitre.oval:def:10709', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10709'}, {'name': 'RHSA-2004:350', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2004-350.html'}, {'name': 'oval:org.mitre.oval:def:4936', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4936'}, {'name': '2004-0045', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.net/errata/2004/0045/'}, {'name': 'DSA-543', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-543'}, {'name': 'TA04-247A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-247A.html'}, {'name': 'GLSA-200409-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-09.xml'}, {'name': '20040913 [OpenPKG-SA-2004.039] OpenPKG Security Advisory (kerberos)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109508872524753&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt'}, {'name': '11078', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11078'}, {'name': 'kerberos-kdc-double-free(17157)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17157'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0642?


Explain the CVE ID: What does the identifier CVE-2004-0643 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0643.

Double free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and earlier may allow local users to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0643?

{'name': 'CLA-2004:860', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860'}, {'name': 'kerberos-krb5rdcred-double-free(17159)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17159'}, {'name': 'oval:org.mitre.oval:def:3322', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3322'}, {'name': 'VU#866472', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/866472'}, {'name': 'oval:org.mitre.oval:def:10267', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10267'}, {'name': 'RHSA-2004:350', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2004-350.html'}, {'name': '2004-0045', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.net/errata/2004/0045/'}, {'name': 'DSA-543', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-543'}, {'name': 'TA04-247A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-247A.html'}, {'name': 'GLSA-200409-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-09.xml'}, {'name': '20040913 [OpenPKG-SA-2004.039] OpenPKG Security Advisory (kerberos)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109508872524753&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt'}, {'name': '11078', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11078'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0643?


Explain the CVE ID: What does the identifier CVE-2004-0644 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0644.

The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding.


Provide references for further information: Can you share references or external links related to CVE-2004-0644?

{'name': 'CLA-2004:860', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860'}, {'name': 'kerberos-asn1-library-dos(17160)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17160'}, {'name': '11079', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11079'}, {'name': 'VU#550464', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/550464'}, {'name': 'RHSA-2004:350', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2004-350.html'}, {'name': 'oval:org.mitre.oval:def:2139', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2139'}, {'name': '2004-0045', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.net/errata/2004/0045/'}, {'name': 'DSA-543', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-543'}, {'name': 'TA04-247A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-247A.html'}, {'name': 'GLSA-200409-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-09.xml'}, {'name': '20040913 [OpenPKG-SA-2004.039] OpenPKG Security Advisory (kerberos)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109508872524753&w=2'}, {'name': 'oval:org.mitre.oval:def:10014', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10014'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-003-asn1.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0644?


Explain the CVE ID: What does the identifier CVE-2004-0645 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0645.

Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field.


Provide references for further information: Can you share references or external links related to CVE-2004-0645?

{'name': 'DSA-579', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-579'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.freebsd.org/ports/portaudit/7a5430df-d562-11d8-b479-02e0185c0b53.html'}, {'name': '7761', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7761'}, {'name': 'GLSA-200407-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200407-11.xml'}, {'name': 'MDKSA-2004:077', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:077'}, {'name': '20040709 wvWare Library Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=115&type=vulnerabilities'}, {'name': 'wvware-wvhandledatetimepicture-bo(16660)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16660'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cpan.cybercomm.nl/pub/gentoo-portage/app-text/wv/files/wv-1.0.0-fix_overflow.patch'}, {'name': 'CLA-2004:863', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000863'}, {'name': 'FLSA:1906', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=1906'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0645?


Explain the CVE ID: What does the identifier CVE-2004-0646 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0646.

Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields.


Provide references for further information: Can you share references or external links related to CVE-2004-0646?

{'name': '20040929 iDEFENSE Security Advisory 09.29.04 - Macromedia JRun 4 mod_jrun Apache Module Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/377194'}, {'name': '12647', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12647/'}, {'name': '11245', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11245'}, {'name': 'VU#990200', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/990200'}, {'name': 'coldfusion-jrun-verbose-bo(17485)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17485'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/devnet/security/security_zone/mpsb04-09.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0646?


Explain the CVE ID: What does the identifier CVE-2004-0647 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0647.

shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file.


Provide references for further information: Can you share references or external links related to CVE-2004-0647?

{'name': 'shorewall-symlink(16651)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16651'}, {'name': '[Shorewall-announce] 20040628 URGENT: Shorewall Security Vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.shorewall.net/pipermail/shorewall-announce/2004-June/000385.html'}, {'name': 'MDKSA-2004:080', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:080'}, {'name': 'GLSA-200407-07', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200407-07.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0647?


Explain the CVE ID: What does the identifier CVE-2004-0648 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0648.

Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbitrary programs via a URI referencing the shell: protocol.


Provide references for further information: Can you share references or external links related to CVE-2004-0648?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html'}, {'name': 'VU#927014', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/927014'}, {'name': 'O-175', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-175.shtml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/shell.html'}, {'name': '12027', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12027'}, {'name': '20040707 shell:windows command question', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023573.html'}, {'name': '20040708 Mozilla Security Advisory 2004-07-08', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108938712815719&w=2'}, {'name': 'mozilla-shell-program-execution(16655)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16655'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0648?


Explain the CVE ID: What does the identifier CVE-2004-0649 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0649.

Buffer overflow in write_packet in control.c for l2tpd may allow remote attackers to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0649?

{'name': 'DSA-530', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-530'}, {'name': '20040604 bss-based buffer overflow in l2tpd', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108640917925735&w=2'}, {'name': 'l2tpd-writepacket-bo(16326)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16326'}, {'name': 'GLSA-200407-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200407-17.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0649?


Explain the CVE ID: What does the identifier CVE-2004-0650 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0650.

UploadServlet in Cisco Collaboration Server (CCS) running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL.


Provide references for further information: Can you share references or external links related to CVE-2004-0650?

{'name': 'VU#718896', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/718896'}, {'name': '20040630 Cisco Collaboration Server Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040630-CCS.shtml'}, {'name': '10639', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10639'}, {'name': '11979', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11979/'}, {'name': 'ccs-servletexec-gain-privileges(16553)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16553'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0650?


Explain the CVE ID: What does the identifier CVE-2004-0651 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0651.

Unknown vulnerability in Sun Java Runtime Environment (JRE) 1.4.2 through 1.4.2_03 allows remote attackers to cause a denial of service (virtual machine hang).


Provide references for further information: Can you share references or external links related to CVE-2004-0651?

{'name': '10301', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10301'}, {'name': '57555', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57555'}, {'name': 'HPSBUX01044', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=108559041910233&w=2'}, {'name': 'VU#118558', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/118558'}, {'name': 'sun-java-dos(16085)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16085'}, {'name': 'SSRT4749', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/6773'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0651?


Explain the CVE ID: What does the identifier CVE-2004-0652 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0652.

BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing certain internal methods.


Provide references for further information: Can you share references or external links related to CVE-2004-0652?

{'name': '10133', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10133'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_55.00.jsp'}, {'name': '5296', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5296'}, {'name': '1009766', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009766'}, {'name': 'bea-gain-privileges(15865)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15865'}, {'name': '11359', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11359'}, {'name': 'VU#352110', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/352110'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0652?


Explain the CVE ID: What does the identifier CVE-2004-0653 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0653.

Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" module with the debug feature enabled, records passwords in plaintext, which could allow local users to gain other user's passwords by reading log files.


Provide references for further information: Can you share references or external links related to CVE-2004-0653?

{'name': '10606', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10606'}, {'name': 'O-172', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-172.shtml'}, {'name': '101519', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101519-1'}, {'name': 'oval:org.mitre.oval:def:2065', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2065'}, {'name': 'oval:org.mitre.oval:def:255', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A255'}, {'name': '11940', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11940/'}, {'name': 'solaris-kerberos-password-plaintext(16450)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16450'}, {'name': 'VU#523710', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/523710'}, {'name': '57587', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57587'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0653?


Explain the CVE ID: What does the identifier CVE-2004-0654 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0654.

Unknown vulnerability in the Basic Security Module (BSM), when configured to audit either the Administrative (ad) or the System-Wide Administration (as) audit class in Solaris 7, 8, and 9, allows local users to cause a denial of service (kernel panic).


Provide references for further information: Can you share references or external links related to CVE-2004-0654?

{'name': 'oval:org.mitre.oval:def:2426', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2426'}, {'name': 'VU#901582', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/901582'}, {'name': '10594', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10594'}, {'name': 'solaris-bsm-audit-dos(16483)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16483'}, {'name': '11930', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11930/'}, {'name': '57497', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57497'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0654?


Explain the CVE ID: What does the identifier CVE-2004-0655 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0655.

eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearchdb.py.tmp temporary file.


Provide references for further information: Can you share references or external links related to CVE-2004-0655?

{'name': '10644', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10644'}, {'name': 'GLSA-200407-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200407-01.xml'}, {'name': 'esearch-eupdatedb-symlink(16584)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16584'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0655?


Explain the CVE ID: What does the identifier CVE-2004-0656 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0656.

The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by exceeding the maximum number of connections.


Provide references for further information: Can you share references or external links related to CVE-2004-0656?

{'name': 'pure-ftpd-acceptclient-dos(16611)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16611'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.pureftpd.org/'}, {'name': 'GLSA-200407-04', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200407-04.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0656?


Explain the CVE ID: What does the identifier CVE-2004-0657 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0657.

Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time.


Provide references for further information: Can you share references or external links related to CVE-2004-0657?

{'name': 'ntp-integer-bo(15406)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15406'}, {'name': 'VU#584606', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/584606'}, {'name': 'SSRT4718', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=108922292425219&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0657?


Explain the CVE ID: What does the identifier CVE-2004-0658 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0658.

Integer overflow in the hpsb_alloc_packet function (incorrectly reported as alloc_hpsb_packet) in IEEE 1394 (Firewire) driver 2.4 and 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via the functions (1) raw1394_write, (2) state_connected, (3) handle_remote_request, or (4) hpsb_make_writebpacket.


Provide references for further information: Can you share references or external links related to CVE-2004-0658?

{'name': 'linux-1394-integer-bo(16480)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16480'}, {'name': '20040622 linux kernel IEEE1394(Firewire) driver integer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108793792820740'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0658?


Explain the CVE ID: What does the identifier CVE-2004-0659 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0659.

Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name.


Provide references for further information: Can you share references or external links related to CVE-2004-0659?

{'name': 'mplayer-common-bo(16532)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16532'}, {'name': 'GLSA-200408-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-01.xml'}, {'name': '10615', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10615'}, {'name': '20040627 MPlayer MeMPlayer.c', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108844316930791&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0659?


Explain the CVE ID: What does the identifier CVE-2004-0660 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0660.

Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in CuteNews 1.3.1 allows remote attackers to inject arbitrary script or HTML via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-0660?

{'name': 'cutenews-id-xss(16525)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16525'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.swp-zone.org/archivos/advisory-06.txt'}, {'name': '20040628 Cross-Site Scripting CuteNews', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108844000409449&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0660?


Explain the CVE ID: What does the identifier CVE-2004-0661 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0661.

Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a denial of service (IP lease depletion) via a DHCP request with the LEASETIME option set to -1, which makes the DHCP lease valid for thirteen or more years.