Provide references for further information: Can you share references or external links related to CVE-2004-1073?

{'name': '20163', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20163'}, {'name': '18684', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18684'}, {'name': 'DSA-1082', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1082'}, {'name': 'MDKSA-2005:022', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:022'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt'}, {'name': 'FLSA:2336', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2336'}, {'name': 'DSA-1070', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1070'}, {'name': '20162', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20162'}, {'name': 'linux-elf-setuid-gain-privileges(18025)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18025'}, {'name': 'RHSA-2006:0190', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2006-0190.html'}, {'name': 'RHSA-2004:549', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-549.html'}, {'name': 'DSA-1067', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1067'}, {'name': '11646', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11646'}, {'name': 'DSA-1069', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1069'}, {'name': 'RHSA-2005:293', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-293.html'}, {'name': 'RHSA-2004:505', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-505.html'}, {'name': '20202', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20202'}, {'name': 'RHSA-2004:504', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-504.html'}, {'name': 'oval:org.mitre.oval:def:11503', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11503'}, {'name': 'RHSA-2006:0191', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2006-0191.html'}, {'name': '20338', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20338'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1073?


Explain the CVE ID: What does the identifier CVE-2004-1074 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1074.

The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel oops) via a malformed a.out binary.


Provide references for further information: Can you share references or external links related to CVE-2004-1074?

{'name': '20041216 [USN-39-1] Linux amd64 kernel vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110322596918807&w=2'}, {'name': '20163', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20163'}, {'name': 'DSA-1082', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1082'}, {'name': 'MDKSA-2005:022', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:022'}, {'name': 'linux-aout-binary-dos(18290)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18290'}, {'name': '[linux-kernel] 20041111 a.out issue', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=linux-kernel&m=110021173607372&w=2'}, {'name': 'FLSA:2336', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2336'}, {'name': 'DSA-1070', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1070'}, {'name': '20162', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20162'}, {'name': '2005-0001', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2005/0001/'}, {'name': '11754', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11754'}, {'name': 'DSA-1067', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1067'}, {'name': 'DSA-1069', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1069'}, {'name': 'oval:org.mitre.oval:def:9751', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9751'}, {'name': 'CLA-2005:930', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930'}, {'name': '20202', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20202'}, {'name': '20338', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20338'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1074?


Explain the CVE ID: What does the identifier CVE-2004-1075 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1075.

Cross-site scripting (XSS) vulnerability in standard_error_message.dtml for Zwiki after 0.10.0rc1 to 0.36.2 allows remote attackers to inject arbitrary HTML and web script via a malformed URL, which is not properly cleansed when generating an error message.


Provide references for further information: Can you share references or external links related to CVE-2004-1075?

{'name': '11745', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11745'}, {'name': '20041124 STG Security Advisory: [SSA-20041122-12] Zwiki XSS vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110138568212036&w=2'}, {'name': '20041126 Re: STG Security Advisory: [SSA-20041122-12] Zwiki XSS vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110149122529761&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://zwiki.org/925ZwikiXSSVulnerability'}, {'name': 'zwiki-link-xss(18237)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18237'}, {'name': 'GLSA-200412-23', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-23.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1075?


Explain the CVE ID: What does the identifier CVE-2004-1076 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1076.

Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to execute arbitrary code via large values in the configuration file.


Provide references for further information: Can you share references or external links related to CVE-2004-1076?

{'name': '13670', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13670/'}, {'name': '20041126 Re: Atari800 - local root. (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110149441815270&w=2'}, {'name': 'DSA-609', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-609'}, {'name': '12610', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/12610'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.sourceforge.net/viewcvs.py/atari800/atari800/DOC/ChangeLog?view=markup'}, {'name': '11756', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11756'}, {'name': '20041125 Atari800 - local root.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110142899319841&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1076?


Explain the CVE ID: What does the identifier CVE-2004-1077 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1077.

Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive.


Provide references for further information: Can you share references or external links related to CVE-2004-1077?

{'name': '15108', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15108'}, {'name': '20050426 Citrix Program Neighborhood Agent Arbitrary Shortcut Creation Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=237&type=vulnerabilities'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.citrix.com/kb/entry.jspa?externalID=CTX105650'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1077?


Explain the CVE ID: What does the identifier CVE-2004-1078 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1078.

Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName XML element.


Provide references for further information: Can you share references or external links related to CVE-2004-1078?

{'name': '15108', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15108'}, {'name': '20050426 Citrix Program Neighborhood Agent Buffer Overflow', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=238&type=vulnerabilities'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.citrix.com/kb/entry.jspa?externalID=CTX105650'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1078?


Explain the CVE ID: What does the identifier CVE-2004-1079 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1079.

Buffer overflow in (1) ncplogin and (2) ncpmap in nwclient.c for ncpfs 2.2.4, and possibly other versions, may allow local users to gain privileges via a long -T option.


Provide references for further information: Can you share references or external links related to CVE-2004-1079?

{'name': 'FLSA:152904', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/433927/100/0/threaded'}, {'name': 'MDKSA-2005:028', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:028'}, {'name': '20041129 ncpfs buffer overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029563.html'}, {'name': '11945', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11945'}, {'name': 'GLSA-200412-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-09.xml'}, {'name': '20041129 ncpfs buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110175523207437&w=2'}, {'name': 'ncpfs-nwclientc-bo(18283)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18283'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1079?


Explain the CVE ID: What does the identifier CVE-2004-1080 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1080.

The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2004-1080?

{'name': '1012516', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012516'}, {'name': '890710', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/kb/890710'}, {'name': 'VU#145134', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/145134'}, {'name': 'oval:org.mitre.oval:def:2541', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2541'}, {'name': '12378', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/12378'}, {'name': 'oval:org.mitre.oval:def:1549', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1549'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.immunitysec.com/downloads/instantanea.pdf'}, {'name': '13328', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13328/'}, {'name': 'wins-memory-pointer-hijack(18259)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18259'}, {'name': 'P-054', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-054.shtml'}, {'name': 'oval:org.mitre.oval:def:3677', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3677'}, {'name': 'oval:org.mitre.oval:def:4831', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4831'}, {'name': '20041126 Immunity, Inc Advisor', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110150370506704&w=2'}, {'name': '11763', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11763'}, {'name': '20041129 Microsoft WINS Server Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/xforce/alerts/id/184'}, {'name': 'MS04-045', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-045'}, {'name': 'oval:org.mitre.oval:def:4372', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4372'}, {'name': 'oval:org.mitre.oval:def:2734', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2734'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1080?


Explain the CVE ID: What does the identifier CVE-2004-1081 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1081.

The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly restrict access to a secure text input field, which allows local users to read keyboard input from other applications within the same window session.


Provide references for further information: Can you share references or external links related to CVE-2004-1081?

{'name': '11802', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11802'}, {'name': '13362', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13362/'}, {'name': 'APPLE-SA-2004-12-02', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html'}, {'name': 'macos-appkit-obtain-info(18350)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18350'}, {'name': 'P-049', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-049.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1081?


Explain the CVE ID: What does the identifier CVE-2004-1082 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1082.

mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.


Provide references for further information: Can you share references or external links related to CVE-2004-1082?

{'name': 'macos-moddigest-response-replay(18347)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18347'}, {'name': 'APPLE-SA-2004-12-02', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html'}, {'name': '1012414', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2004/Dec/1012414.html'}, {'name': '9571', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9571'}, {'name': 'P-049', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-049.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1082?


Explain the CVE ID: What does the identifier CVE-2004-1083 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1083.

Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attackers to read .DS_Store files and files beginning with ".ht" using alternate capitalization.


Provide references for further information: Can you share references or external links related to CVE-2004-1083?

{'name': '11802', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11802'}, {'name': '13362', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13362/'}, {'name': 'APPLE-SA-2005-08-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html'}, {'name': 'APPLE-SA-2004-12-02', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html'}, {'name': 'apache-hfs-file-disclosure(18348)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18348'}, {'name': 'APPLE-SA-2005-08-17', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html'}, {'name': 'P-049', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-049.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1083?


Explain the CVE ID: What does the identifier CVE-2004-1084 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1084.

Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names related to multiple data streams in HFS+, which bypass Apache file handles.


Provide references for further information: Can you share references or external links related to CVE-2004-1084?

{'name': '11802', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11802'}, {'name': '13362', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13362/'}, {'name': 'apache-hfs-obtain-info(18349)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18349'}, {'name': 'APPLE-SA-2005-08-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html'}, {'name': 'APPLE-SA-2004-12-02', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html'}, {'name': 'APPLE-SA-2005-08-17', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html'}, {'name': 'P-049', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-049.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1084?


Explain the CVE ID: What does the identifier CVE-2004-1085 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1085.

Human Interface Toolbox (HIToolBox) for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit key combination, even when the system is running in kiosk mode.


Provide references for further information: Can you share references or external links related to CVE-2004-1085?

{'name': '11802', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11802'}, {'name': '13362', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13362/'}, {'name': 'APPLE-SA-2004-12-02', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html'}, {'name': 'macos-hitoolbox-kiosk-dos(18352)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18352'}, {'name': 'P-049', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-049.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1085?


Explain the CVE ID: What does the identifier CVE-2004-1086 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1086.

Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file.


Provide references for further information: Can you share references or external links related to CVE-2004-1086?

{'name': '11802', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11802'}, {'name': '13362', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13362/'}, {'name': 'macos-psnormalizer-bo(18354)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18354'}, {'name': 'APPLE-SA-2004-12-02', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html'}, {'name': 'P-049', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-049.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1086?


Explain the CVE ID: What does the identifier CVE-2004-1087 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1087.

Terminal for Apple Mac OS X 10.3.6 may indicate that "Secure Keyboard Entry" is enabled even when it is not, which could result in a false sense of security for the user.


Provide references for further information: Can you share references or external links related to CVE-2004-1087?

{'name': '11802', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11802'}, {'name': '13362', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13362/'}, {'name': 'macos-terminal-secure-improper(18355)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18355'}, {'name': 'APPLE-SA-2004-12-02', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html'}, {'name': 'P-049', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-049.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1087?


Explain the CVE ID: What does the identifier CVE-2004-1088 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1088.

Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication information.


Provide references for further information: Can you share references or external links related to CVE-2004-1088?

{'name': '11802', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11802'}, {'name': '13362', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13362/'}, {'name': 'APPLE-SA-2004-12-02', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html'}, {'name': 'postfix-crammd5-auth-replay(18353)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18353'}, {'name': 'P-049', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-049.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1088?


Explain the CVE ID: What does the identifier CVE-2004-1089 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1089.

Unknown vulnerability in Apple Mac OS X 10.3.6 server, when using Kerberos authentication and Cyrus IMAP allows local users to access mailboxes of other users.


Provide references for further information: Can you share references or external links related to CVE-2004-1089?

{'name': '11802', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11802'}, {'name': '13362', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13362/'}, {'name': 'APPLE-SA-2004-12-02', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html'}, {'name': 'cyrus-kerberos-gain-access(18351)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18351'}, {'name': 'P-049', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-049.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1089?


Explain the CVE ID: What does the identifier CVE-2004-1090 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1090.

Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section header."


Provide references for further information: Can you share references or external links related to CVE-2004-1090?

{'name': 'midnight-commander-section-dos(18907)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18907'}, {'name': '13863', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13863/'}, {'name': 'DSA-639', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-639'}, {'name': 'RHSA-2005:512', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-512.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1090?


Explain the CVE ID: What does the identifier CVE-2004-1091 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1091.

Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by triggering a null dereference.


Provide references for further information: Can you share references or external links related to CVE-2004-1091?

{'name': 'midnight-commander-find-dos(18908)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18908'}, {'name': '13863', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13863'}, {'name': 'DSA-639', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-639'}, {'name': 'RHSA-2005:512', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-512.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1091?


Explain the CVE ID: What does the identifier CVE-2004-1092 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1092.

Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory.


Provide references for further information: Can you share references or external links related to CVE-2004-1092?

{'name': '13863', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13863/'}, {'name': 'DSA-639', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-639'}, {'name': 'GLSA-200502-24', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-24.xml'}, {'name': 'midnight-commander-memory-allocation(18904)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18904'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1092?


Explain the CVE ID: What does the identifier CVE-2004-1093 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1093.

Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory."


Provide references for further information: Can you share references or external links related to CVE-2004-1093?

{'name': '13863', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13863/'}, {'name': 'midnight-commander-key-dos(18905)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18905'}, {'name': 'DSA-639', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-639'}, {'name': 'RHSA-2005:512', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-512.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1093?


Explain the CVE ID: What does the identifier CVE-2004-1094 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1094.

Buffer overflow in InnerMedia DynaZip DUNZIP32.dll file version 5.00.03 and earlier allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, as demonstrated using (1) a .rjs (skin) file in RealPlayer 10 through RealPlayer 10.5 (6.0.12.1053), RealOne Player 1 and 2, (2) the Restore Backup function in CheckMark Software Payroll 2004/2005 3.9.6 and earlier, (3) CheckMark MultiLedger before 7.0.2, (4) dtSearch 6.x and 7.x, (5) mcupdmgr.exe and mghtml.exe in McAfee VirusScan 10 Build 10.0.21 and earlier, (6) IBM Lotus Notes before 6.5.5, and other products.  NOTE: it is unclear whether this is the same vulnerability as CVE-2004-0575, although the data manipulations are the same.


Provide references for further information: Can you share references or external links related to CVE-2004-1094?

{'name': '20051223 dtSearch DUNZIP32.dll Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/420274/100/0/threaded'}, {'name': '1011944', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011944'}, {'name': '20041027 EEYE: RealPlayer Zipped Skin File Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-10/1044.html'}, {'name': 'payroll-dunzip32-bo(22737)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/22737'}, {'name': '19906', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/19906'}, {'name': 'ADV-2005-2057', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/2057'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.networksecurity.fi/advisories/lotus-notes.html'}, {'name': '20041027 High Risk Vulnerability in RealPlayer', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109894226007607&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.networksecurity.fi/advisories/payroll.html'}, {'name': '19451', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19451'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.networksecurity.fi/advisories/dtsearch.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.networksecurity.fi/advisories/mcafee-virusscan.html'}, {'name': '11555', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11555'}, {'name': '17394', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17394'}, {'name': 'realplayer-dunzip32-bo(17879)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17879'}, {'name': '20060330 McAfee VirusScan DUNZIP32.dll Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429361/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.networksecurity.fi/advisories/multiledger.html'}, {'name': '20060906 IBM Lotus Notes DUNZIP32.dll Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/445369/100/0/threaded'}, {'name': 'VU#582498', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/582498'}, {'name': '1012297', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012297'}, {'name': 'ADV-2006-1176', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1176'}, {'name': '1016817', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016817'}, {'name': '18194', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18194'}, {'name': '653', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/653'}, {'name': '296', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/296'}, {'name': '17096', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17096'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://service.real.com/help/faq/security/041026_player/EN/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/windowsntfocus/6Z00W00EAM.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1094?


Explain the CVE ID: What does the identifier CVE-2004-1095 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1095.

Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) readprf.c, (9) readtiff.c, (10) readxbm.c, (11) readxpm.c in zgv 5.8 allow remote attackers to execute arbitrary code via certain image headers that cause calculations to be overflowed and small buffers to be allocated, leading to buffer overflows.  NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer.  Therefore, they should be regarded as distinct.


Provide references for further information: Can you share references or external links related to CVE-2004-1095?

{'name': 'zgv-image-header-bo(17871)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17871'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.svgalib.org/rus/zgv/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.svgalib.org/rus/zgv/zgv-5.8-integer-overflow-fix.diff'}, {'name': 'GLSA-200411-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-12.xml'}, {'name': '20041028 Re: zgv image viewing heap overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109898111915661&w=2'}, {'name': '11556', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11556'}, {'name': '20041026 zgv image viewing heap overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109886210702781&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1095?


Explain the CVE ID: What does the identifier CVE-2004-1096 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1096.

Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.


Provide references for further information: Can you share references or external links related to CVE-2004-1096?

{'name': '13038', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13038/'}, {'name': 'MDKSA-2004:118', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:118'}, {'name': 'antivirus-zip-protection-bypass(17761)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17761'}, {'name': 'VU#492545', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/492545'}, {'name': '11448', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11448'}, {'name': '20041018 Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true'}, {'name': 'GLSA-200410-31', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200410-31.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1096?


Explain the CVE ID: What does the identifier CVE-2004-1097 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1097.

Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in the URL.


Provide references for further information: Can you share references or external links related to CVE-2004-1097?

{'name': 'cherokee-format-string(17934)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17934'}, {'name': 'GLSA-200411-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-02.xml'}, {'name': '11574', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11574'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=67667'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1097?


Explain the CVE ID: What does the identifier CVE-2004-1098 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1098.

MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the Content-Type header.


Provide references for further information: Can you share references or external links related to CVE-2004-1098?

{'name': '20041026 [Mimedefang] SECURITY: Patch for MIME-tools', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.roaringpenguin.com/pipermail/mimedefang/2004-October/024959.html'}, {'name': 'MDKSA-2004:123', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:123'}, {'name': 'mimetools-boundary-virus-bypass(17940)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17940'}, {'name': '11563', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11563'}, {'name': 'GLSA-200411-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-06.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1098?


Explain the CVE ID: What does the identifier CVE-2004-1099 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1099.

Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.3.1, when the EAP-TLS protocol is enabled, does not properly handle expired or untrusted certificates, which allows remote attackers to bypass authentication and gain unauthorized access via a "cryptographically correct" certificate with valid fields such as the username.


Provide references for further information: Can you share references or external links related to CVE-2004-1099?

{'name': '20041102 Vulnerability in Cisco Secure Access Control Server EAP-TLS Authentication', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20041102-acs-eap-tls.shtml'}, {'name': 'ciscosecure-eaptls-auth-bypass(17936)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17936'}, {'name': '11577', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11577'}, {'name': 'P-028', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-028.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1099?


Explain the CVE ID: What does the identifier CVE-2004-1100 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1100.

Cross-site scripting (XSS) vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to execute arbitrary web script or HTML via the append parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-1100?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/security_info/vuln_pr0410.html'}, {'name': 'mailpost-append-xss(17953)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17953'}, {'name': 'VU#107998', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/107998'}, {'name': '11596', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11596'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1100?


Explain the CVE ID: What does the identifier CVE-2004-1101 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1101.

mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash), leak sensitive pathname information in the resulting error message, and execute a cross-site scripting (XSS) attack via an HTTP request that contains a / (backslash) and arbitrary webscript before the requested file, which leaks the pathname and does not quote the script in the resulting Visual Basic error message.


Provide references for further information: Can you share references or external links related to CVE-2004-1101?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/security_info/vuln_pr0411.html'}, {'name': '11598', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11598'}, {'name': 'VU#596046', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/596046'}, {'name': 'mailpost-slash-xss(17951)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17951'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1101?


Explain the CVE ID: What does the identifier CVE-2004-1102 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1102.

MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested file exists or not, which allows remote attackers to gain sensitive information.


Provide references for further information: Can you share references or external links related to CVE-2004-1102?

{'name': '11599', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11599'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/security_info/vuln_pr0408.html'}, {'name': 'VU#306086', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/306086'}, {'name': 'mailpost-get-info-disclosure(17954)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17954'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1102?


Explain the CVE ID: What does the identifier CVE-2004-1103 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1103.

MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to gain sensitive information via the debug parameter, which reveals information such as the path to the web root and the web server version.


Provide references for further information: Can you share references or external links related to CVE-2004-1103?

{'name': 'mailpost-information-disclosure(17952)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17952'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/security_info/vuln_pr0409.html'}, {'name': '11595', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11595'}, {'name': 'VU#858726', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/858726'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1103?


Explain the CVE ID: What does the identifier CVE-2004-1104 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1104.

Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor (a) element with an empty "href" attribute, and a FORM whose action points to a malicious URL, and an INPUT submit element that is modified to look like a legitimate URL.


Provide references for further information: Can you share references or external links related to CVE-2004-1104?

{'name': '11273', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11273'}, {'name': '20041030 Re: New URL spoofing bug in Microsoft Internet Explorer', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/379903'}, {'name': 'ie-ahref-status-spoofing(17938)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17938'}, {'name': 'VU#702086', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/702086'}, {'name': '11565', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11565'}, {'name': '20060218 Re: Internet Explorer Phishing mouseover issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425386/100/0/threaded'}, {'name': '20060223 Re: Internet Explorer Phishing mouseover issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425883/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1104?


Explain the CVE ID: What does the identifier CVE-2004-1105 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1105.

Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive information.


Provide references for further information: Can you share references or external links related to CVE-2004-1105?

{'name': '11623', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11623'}, {'name': 'VU#830214', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/830214'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nii.co.in/vuln/contivity.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/CRDY-626N7F'}, {'name': '20041110 Nortel Networks Contivity VPN Client information leakage vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0291.html'}, {'name': 'nortel-contivity-info-disclosure(17988)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17988'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1105?


Explain the CVE ID: What does the identifier CVE-2004-1106 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1106.

Cross-site scripting (XSS) vulnerability in Gallery 1.4.4-pl3 and earlier allows remote attackers to execute arbitrary web script or HTML via "specially formed URLs," possibly via the include parameter in index.php.


Provide references for further information: Can you share references or external links related to CVE-2004-1106?

{'name': 'gallery-script-xss(17948)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17948'}, {'name': '11602', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11602'}, {'name': 'DSA-642', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-642'}, {'name': 'GLSA-200411-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-10.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=142&mode=thread&order=0&thold=0'}, {'tags': ['x_refsource_MISC'], 'url': 'http://g3cko.info/gallery2-4.patch'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1106?


Explain the CVE ID: What does the identifier CVE-2004-1107 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1107.

dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2004-1107?

{'name': '13108', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13108/'}, {'name': '11616', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11616'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=69147'}, {'name': 'portage-dispatchconf-symlink(17986)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17986'}, {'name': 'GLSA-200411-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-13.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1107?


Explain the CVE ID: What does the identifier CVE-2004-1108 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1108.

qpkg in Gentoolkit 0.2.0_pre10 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary directory.


Provide references for further information: Can you share references or external links related to CVE-2004-1108?

{'name': '13108', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13108/'}, {'name': 'gentoolkit-symlink(17968)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17968'}, {'name': '11617', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11617'}, {'name': 'GLSA-200411-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-13.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=68846'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1108?


Explain the CVE ID: What does the identifier CVE-2004-1109 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1109.

The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service (CPU consumption and system freeze from infinite loop) via a (1) TCP, (2) UDP, or (3) ICMP packet with a zero length IP Option field.


Provide references for further information: Can you share references or external links related to CVE-2004-1109?

{'name': 'kerio-pf-packet-dos(17992)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17992'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kerio.com/security_advisory.html'}, {'name': '11639', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11639'}, {'name': 'AD20041109', 'tags': ['third-party-advisory', 'x_refsource_EEYE'], 'url': 'http://www.eeye.com/html/research/advisories/AD20041109.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1109?


Explain the CVE ID: What does the identifier CVE-2004-1110 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1110.

The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink attack on the epson temporary file.


Provide references for further information: Can you share references or external links related to CVE-2004-1110?

{'name': 'GLSA-200411-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-17.xml'}, {'name': 'mtink-tmp-file-symlink(18011)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18011'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=70310'}, {'name': '11640', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11640'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1110?


Explain the CVE ID: What does the identifier CVE-2004-1111 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1111.

Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size.


Provide references for further information: Can you share references or external links related to CVE-2004-1111?

{'name': 'oval:org.mitre.oval:def:5632', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5632'}, {'name': 'TA04-316A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-316A.html'}, {'name': '20041110 Cisco Security Advisory: Cisco IOS DHCP Blocked Interface Denial-of-Service', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20041110-dhcp.shtml'}, {'name': 'VU#630104', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/630104'}, {'name': 'cisco-ios-dhcp-dos(18021)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18021'}, {'name': 'P-034', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-034.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1111?


Explain the CVE ID: What does the identifier CVE-2004-1112 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1112.

The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks within the five minute timeout period.


Provide references for further information: Can you share references or external links related to CVE-2004-1112?

{'name': '11659', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11659'}, {'name': 'csa-buffer-protection-bypass(18037)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18037'}, {'name': '20041111 Crafted Timed Attack Evades Cisco Security Agent Protections', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20041111-csa.shtml'}, {'name': 'P-036', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-036.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1112?


Explain the CVE ID: What does the identifier CVE-2004-1113 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1113.

SQL injection vulnerability in SQLgrey Postfix greylisting service before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) sender or (2) recipient e-mail addresses.


Provide references for further information: Can you share references or external links related to CVE-2004-1113?

{'name': '11633', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11633'}, {'name': '2004-0058', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0058/'}, {'name': 'sqlgrey-postfix-sql-injection(17998)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17998'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=281256'}, {'name': '13135', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13135/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1113?


Explain the CVE ID: What does the identifier CVE-2004-1114 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1114.

Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username, a different vulnerability than CVE-2004-1777.


Provide references for further information: Can you share references or external links related to CVE-2004-1114?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.skype.com/products/skype/windows/changelog.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.skype.com/security/ssa-2004-02.html'}, {'name': '20041116 Skype callto:// BoF technical details', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028852.html'}, {'name': '20041116 Skype callto:// BoF technical details', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110062240706017&w=2'}, {'name': '20041115 Re: Skype callto:// BoF technical details', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110067029422696&w=2'}, {'name': '11682', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11682'}, {'name': '11786', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/11786'}, {'name': 'skype-callto-uri-bo(18063)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18063'}, {'name': '13191', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13191'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1114?


Explain the CVE ID: What does the identifier CVE-2004-1115 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1115.

The init scripts in Search for Extraterrestrial Intelligence (SETI) project 3.08-r3 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs.


Provide references for further information: Can you share references or external links related to CVE-2004-1115?

{'name': 'GLSA-200411-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-26.xml'}, {'name': 'seti@home-gain-privileges(18149)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18149'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1115?


Explain the CVE ID: What does the identifier CVE-2004-1116 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1116.

The init scripts in Great Internet Mersenne Prime Search (GIMPS) 23.9 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs.


Provide references for further information: Can you share references or external links related to CVE-2004-1116?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1116?


Explain the CVE ID: What does the identifier CVE-2004-1117 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1117.

The init scripts in ChessBrain 20407 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs.


Provide references for further information: Can you share references or external links related to CVE-2004-1117?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1117?


Explain the CVE ID: What does the identifier CVE-2004-1118 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1118.

Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename.


Provide references for further information: Can you share references or external links related to CVE-2004-1118?

{'name': '11721', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11721'}, {'name': '20041122 WeOnlyDo! COM Ftp DELUXE ActiveX Control Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029243.html'}, {'name': '20041122 WeOnlyDo! COM Ftp DELUXE ActiveX Control Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110114233323417&w=2'}, {'name': '20041122 CoffeeCup FTP Clients Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029244.html'}, {'name': 'wodftpdlx-long-filename-bo(18190)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18190'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1118?


Explain the CVE ID: What does the identifier CVE-2004-1119 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1119.

Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file.


Provide references for further information: Can you share references or external links related to CVE-2004-1119?

{'name': 'winamp-incddadll-bo(18197)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18197'}, {'name': '13269', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13269/'}, {'name': '20041123 Winamp - Buffer Overflow In IN_CDDA.dll', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110123330404482&w=2'}, {'name': '20041124 Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110146036300803&w=2'}, {'name': '11730', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11730'}, {'name': '20041124 Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched]', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=110135574326217&w=2'}, {'name': 'VU#986504', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/986504'}, {'name': '20041123 Winamp - Buffer Overflow In IN_CDDA.dll', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=110126352412395&w=2'}, {'name': '20041126 Re: Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2004-11/0369.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-assessment.com/Papers/Winamp_IN_CDDA_Buffer_Overflow.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1119?


Explain the CVE ID: What does the identifier CVE-2004-1120 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1120.

Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and earlier allow remote servers to execute arbitrary code via a long Location header.


Provide references for further information: Can you share references or external links related to CVE-2004-1120?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=70090'}, {'name': 'GLSA-200411-31', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-31.xml'}, {'name': 'DSA-663', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-663'}, {'name': 'prozilla-bo(18210)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18210'}, {'name': '11734', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11734'}, {'name': '20041124 Prozilla Remote Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/382219'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1120?


Explain the CVE ID: What does the identifier CVE-2004-1121 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1121.

Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags.


Provide references for further information: Can you share references or external links related to CVE-2004-1121?

{'name': 'VU#925430', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/925430'}, {'name': '11573', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11573'}, {'name': '13047', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13047/'}, {'name': 'ie-table-status-spoofing(17909)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17909'}, {'name': 'APPLE-SA-2004-12-02', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1121?


Explain the CVE ID: What does the identifier CVE-2004-1122 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1122.

Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows, aka the "Dialog Box Spoofing Vulnerability," a different vulnerability than CVE-2004-1314.


Provide references for further information: Can you share references or external links related to CVE-2004-1122?

{'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2004-10/'}, {'name': '12892', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12892'}, {'name': 'APPLE-SA-2004-12-02', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/multiple_browsers_dialog_box_spoofing_test/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1122?


Explain the CVE ID: What does the identifier CVE-2004-1123 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1123.

Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a DESCRIBE request with a location that contains a null byte.


Provide references for further information: Can you share references or external links related to CVE-2004-1123?

{'name': 'darwin-describe-dos(18357)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18357'}, {'name': '20041203 Apple Darwin Streaming Server DESCRIBE Null Byte Denial of Service Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=159&type=vulnerabilities'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1123?


Explain the CVE ID: What does the identifier CVE-2004-1124 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1124.

Unknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape the chroot jail and conduct unauthorized activities.


Provide references for further information: Can you share references or external links related to CVE-2004-1124?

{'name': 'SCOSA-2005.2', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.2/SCOSA-2005.2.txt'}, {'name': '15339', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15339'}, {'name': '13915', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13915'}, {'name': 'SCOSA-2005.22', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.22/SCOSA-2005.22.txt'}, {'name': '12300', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12300'}, {'name': 'chroot-jail-security-bypass(18970)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18970'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1124?


Explain the CVE ID: What does the identifier CVE-2004-1125 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1125.

Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.


Provide references for further information: Can you share references or external links related to CVE-2004-1125?

{'name': 'RHSA-2005:013', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-013.html'}, {'name': '17277', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17277'}, {'name': 'RHSA-2005:066', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-066.html'}, {'name': 'RHSA-2005:034', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-034.html'}, {'name': 'RHSA-2005:018', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-018.html'}, {'name': 'FLSA:2352', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2352'}, {'name': 'FLSA:2353', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2353'}, {'name': '1012646', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012646'}, {'name': '12070', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12070'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20041223-1.txt'}, {'name': 'xpdf-gfx-doimage-bo(18641)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18641'}, {'name': 'GLSA-200501-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-17.xml'}, {'name': 'RHSA-2005:026', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-026.html'}, {'name': 'RHSA-2005:053', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-053.html'}, {'name': 'USN-50-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/50-1/'}, {'name': 'GLSA-200501-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-13.xml'}, {'name': '20041228 KDE Security Advisory: kpdf Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?t=110378596500001&r=1&w=2'}, {'name': 'GLSA-200412-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-25.xml'}, {'name': '20041223 [USN-48-1] xpdf, tetex-bin vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030241.html'}, {'name': 'SUSE-SR:2005:001', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_01_sr.html'}, {'name': 'RHSA-2005:354', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-354.html'}, {'name': '20041221 Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=172&type=vulnerabilities'}, {'name': 'oval:org.mitre.oval:def:10830', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10830'}, {'name': 'SCOSA-2005.42', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.42/SCOSA-2005.42.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.00pl2.patch'}, {'name': 'CLA-2005:921', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000921'}, {'name': 'RHSA-2005:057', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-057.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1125?


Explain the CVE ID: What does the identifier CVE-2004-1127 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1127.

Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code via a long RedirectAll command.


Provide references for further information: Can you share references or external links related to CVE-2004-1127?

{'name': '20041124 Buffer Overflow in Open Dc Hub 0.7.14', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110144606411674&w=2'}, {'name': '11747', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11747'}, {'name': 'open-hub-redirectall-bo(18254)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18254'}, {'name': 'GLSA-200411-37', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-37.xml'}, {'name': '20041124 Buffer Overflow in Open Dc Hub 0.7.14', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029383.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1127?


Explain the CVE ID: What does the identifier CVE-2004-1128 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1128.

Buffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary code via an attachment with a long filename.


Provide references for further information: Can you share references or external links related to CVE-2004-1128?

{'name': '20041124 [SIG^2 G-TEC] CMailServer WebMail v5.2 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110137313329955&w=2'}, {'name': '11742', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11742'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/cmailserver52.html'}, {'name': 'cmailserver-cmailcomdll-bo(18276)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18276'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1128?


Explain the CVE ID: What does the identifier CVE-2004-1129 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1129.

SQL injection vulnerability in (1) fdelmail.asp, (2) addressc.asp, and possibly (3) postmail.asp and (4) fmvmail.asp in CMailServer 5.2 allow remote attackers to inject arbitrary SQL commands and delete mail metadata or e-mail addresses of contacts via the indexOfMail parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-1129?

{'name': '20041124 [SIG^2 G-TEC] CMailServer WebMail v5.2 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110137313329955&w=2'}, {'name': '11742', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11742'}, {'name': 'cmailserver-fdelmail-addressc-sql-injection(18281)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18281'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/cmailserver52.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1129?


Explain the CVE ID: What does the identifier CVE-2004-1130 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1130.

Cross-site scripting (XSS) vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute arbitrary web script or HTML via personal information fields, such as (1) username, (2) name, or (3) comments.


Provide references for further information: Can you share references or external links related to CVE-2004-1130?

{'name': '20041124 [SIG^2 G-TEC] CMailServer WebMail v5.2 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110137313329955&w=2'}, {'name': '11742', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11742'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/cmailserver52.html'}, {'name': 'cmailserver-adminasp-xss(18280)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18280'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1130?


Explain the CVE ID: What does the identifier CVE-2004-1131 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1131.

Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitrary code via long command line arguments.


Provide references for further information: Can you share references or external links related to CVE-2004-1131?

{'name': 'SCOSA-2005.13', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.13/SCOSA-2005.13.txt'}, {'name': '12474', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12474'}, {'name': 'openserver-enable-bo(19243)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19243'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1131?


Explain the CVE ID: What does the identifier CVE-2004-1133 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1133.

Multiple cross-site scripting (XSS) vulnerabilities in Microsoft W3Who ISAPI (w3who.dll) allow remote attackers to inject arbitrary HTML and web script via (1) HTTP headers such as "Connection" or (2) invalid parameters whose values are echoed in the resulting error message.


Provide references for further information: Can you share references or external links related to CVE-2004-1133?

{'name': '20041206 Multiple vulnerabilities in w3who ISAPI DLL', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=110234486823233&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.exaprobe.com/labs/advisories/esa-2004-1206.html'}, {'name': 'w3who-http-error-xss(18375)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18375'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1133?


Explain the CVE ID: What does the identifier CVE-2004-1134 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1134.

Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long query string.


Provide references for further information: Can you share references or external links related to CVE-2004-1134?

{'name': '20041206 Multiple vulnerabilities in w3who ISAPI DLL', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=110234486823233&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.exaprobe.com/labs/advisories/esa-2004-1206.html'}, {'name': 'w3who-bo(18377)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18377'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1134?


Explain the CVE ID: What does the identifier CVE-2004-1135 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1135.

Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1) SITE, (2) XMKD, (3) MKD, and (4) RNFR commands.


Provide references for further information: Can you share references or external links related to CVE-2004-1135?

{'name': 'wsftp-ftp-commands-bo(18296)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18296'}, {'name': '20041129 Multiple buffer overlows in WS_FTP Server Version 5.03, 2004.10.14.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110177654524819&w=2'}, {'name': '20041129 Multiple buffer overlows in WS_FTP Server Version 5.03, 2004.10.14.', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029600.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/exploits/6D00L2KBPG.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1135?


Explain the CVE ID: What does the identifier CVE-2004-1136 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1136.

Buffer overflow in CuteFTP Professional 6.0, and possibly other versions, allows remote FTP servers to cause a denial of service (application crash) via large replies to FTP commands.


Provide references for further information: Can you share references or external links related to CVE-2004-1136?

{'name': 'cuteftp-reply-bo(18309)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18309'}, {'name': '20041129 CuteFTP 6.0 Professional Remote Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110182983622642&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1136?


Explain the CVE ID: What does the identifier CVE-2004-1137 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1137.

Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via (1) the ip_mc_source function, which decrements a counter to -1, or (2) the igmp_marksources function, which does not properly validate IGMP message parameters and performs an out-of-bounds read.


Provide references for further information: Can you share references or external links related to CVE-2004-1137?

{'name': 'oval:org.mitre.oval:def:11144', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11144'}, {'name': 'MDKSA-2005:022', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:022'}, {'name': '20041214 [USN-38-1] Linux kernel vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110306397320336&w=2'}, {'name': 'FLSA:2336', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2336'}, {'name': 'SUSE-SA:2004:044', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_44_kernel.html'}, {'name': 'RHSA-2005:092', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-092.html'}, {'name': 'CLA-2005:930', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930'}, {'tags': ['x_refsource_MISC'], 'url': 'http://isec.pl/vulnerabilities/isec-0018-igmp.txt'}, {'name': 'linux-igmpmarksources-dos(18482)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18482'}, {'name': 'linux-ipmcsource-code-execution(18481)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18481'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1137?


Explain the CVE ID: What does the identifier CVE-2004-1138 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1138.

VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.


Provide references for further information: Can you share references or external links related to CVE-2004-1138?

{'name': 'OpenPKG-SA-2004.052', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://marc.info/?l=bugtraq&m=110313588125609&w=2'}, {'name': 'GLSA-200412-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-10.xml'}, {'name': 'vim-modeline-gain-privileges(18503)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18503'}, {'name': 'FLSA:2343', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2343'}, {'name': 'RHSA-2005:036', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-036.html'}, {'name': 'RHSA-2005:010', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-010.html'}, {'name': 'oval:org.mitre.oval:def:9571', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9571'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1138?


Explain the CVE ID: What does the identifier CVE-2004-1139 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1139.

Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (application crash).


Provide references for further information: Can you share references or external links related to CVE-2004-1139?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00016.html'}, {'name': 'CLA-2005:916', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916'}, {'name': 'GLSA-200412-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-15.xml'}, {'name': '13468', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13468/'}, {'name': 'MDKSA-2004:152', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:152'}, {'name': 'RHSA-2005:037', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-037.html'}, {'name': '11943', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11943'}, {'name': 'ethereal-dicom-dos(18484)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18484'}, {'name': 'oval:org.mitre.oval:def:11319', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11319'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'P-061', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-061.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1139?


Explain the CVE ID: What does the identifier CVE-2004-1140 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1140.

Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang) and possibly fill available disk space via an invalid RTP timestamp.