Provide references for further information: Can you share references or external links related to CVE-2004-0952?

{'name': 'HPSBUX01219', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=112422597529112&w=2'}, {'name': 'oval:org.mitre.oval:def:5775', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5775'}, {'name': 'hpigniteux-addnewclient-gain-access(21857)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/21857'}, {'name': '20050816 Corsaire Security Advisory: HP Ignite-UX filesystem permissions issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=112420609211136&w=2'}, {'name': '16456', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/16456/'}, {'name': '1014711', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014711'}, {'name': 'SSRT4874', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=112422597529112&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0952?


Explain the CVE ID: What does the identifier CVE-2004-0953 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0953.

Buffer overflow in the C2S module in the open source Jabber 2.x server (Jabberd) allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long username.


Provide references for further information: Can you share references or external links related to CVE-2004-0953?

{'name': '20041124 Jabberd2.x remote BuffJabberd2.x remote Buffer Overflowser Overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110144303826709&w=2'}, {'name': '11741', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11741'}, {'name': '20041124 Jabberd2.x remote BuffJabberd2.x remote Buffer Overflowser Overflows', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029346.html'}, {'name': 'jabberd2-c2s-bo(18238)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18238'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0953?


Explain the CVE ID: What does the identifier CVE-2004-0954 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0954.


Provide references for further information: Can you share references or external links related to CVE-2004-0954?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0954?


Explain the CVE ID: What does the identifier CVE-2004-0955 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0955.


Provide references for further information: Can you share references or external links related to CVE-2004-0955?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0955?


Explain the CVE ID: What does the identifier CVE-2004-0956 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0956.

MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.


Provide references for further information: Can you share references or external links related to CVE-2004-0956?

{'name': '2004-0054', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.net/errata/2004/0054/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.mysql.com/packagers/202'}, {'name': 'GLSA-200410-22', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml'}, {'name': 'mysql-match-against-dos(17768)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17768'}, {'name': 'SUSE-SR:2004:001', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_01_sr.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.mysql.com/bug.php?id=3870'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0956?


Explain the CVE ID: What does the identifier CVE-2004-0957 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0957.

Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.


Provide references for further information: Can you share references or external links related to CVE-2004-0957?

{'name': 'mysql-underscore-gain-priv(17783)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17783'}, {'name': 'CLA-2005:947', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947'}, {'name': 'RHSA-2004:611', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-611.html'}, {'name': 'DSA-707', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-707'}, {'name': 'MDKSA-2005:070', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:070'}, {'name': 'USN-32-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-32-1/'}, {'name': 'RHSA-2004:597', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-597.html'}, {'name': 'P-018', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-018.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0957?


Explain the CVE ID: What does the identifier CVE-2004-0958 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0958.

php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length.


Provide references for further information: Can you share references or external links related to CVE-2004-0958?

{'name': '20040915 [VulnWatch] PHP Vulnerability N. 1', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0053.html'}, {'name': '20040915 PHP Vulnerability N. 1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109527531130492&w=2'}, {'name': '12560', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12560/'}, {'name': '1011279', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011279'}, {'name': 'FLSA:2344', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2344'}, {'name': 'php-phpinfo-disclose-memory(17393)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17393'}, {'name': 'oval:org.mitre.oval:def:10863', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10863'}, {'name': 'RHSA-2004:687', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-687.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0958?


Explain the CVE ID: What does the identifier CVE-2004-0959 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0959.

rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that causes the "$_FILES" array to be modified.


Provide references for further information: Can you share references or external links related to CVE-2004-0959?

{'name': 'oval:org.mitre.oval:def:10961', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10961'}, {'name': 'php-mime-array-execute-code(17392)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17392'}, {'name': '1011307', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011307'}, {'name': '12560', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12560/'}, {'name': '20040915 Php Vulnerability N. 2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109534848430404&w=2'}, {'name': 'FLSA:2344', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2344'}, {'name': '20040915 Php Vulnerability N. 2', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0054.html'}, {'name': 'RHSA-2004:687', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-687.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0959?


Explain the CVE ID: What does the identifier CVE-2004-0960 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0960.

FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) that cause a memcpy operation with a -1 argument.


Provide references for further information: Can you share references or external links related to CVE-2004-0960?

{'name': 'GLSA-200409-29', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-29.xml'}, {'name': '11222', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11222'}, {'name': 'freeradius-dos(17440)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17440'}, {'name': 'VU#541574', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/541574'}, {'name': 'oval:org.mitre.oval:def:11023', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11023'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0960?


Explain the CVE ID: What does the identifier CVE-2004-0961 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0961.

Memory leak in FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (memory exhaustion) via a series of Access-Request packets with (1) Ascend-Send-Secret, (2) Ascend-Recv-Secret, or (3) Tunnel-Password attributes.


Provide references for further information: Can you share references or external links related to CVE-2004-0961?

{'name': 'GLSA-200409-29', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-29.xml'}, {'name': 'oval:org.mitre.oval:def:10024', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10024'}, {'name': '11222', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11222'}, {'name': 'freeradius-dos(17440)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17440'}, {'name': 'VU#541574', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/541574'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0961?


Explain the CVE ID: What does the identifier CVE-2004-0962 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0962.

Apple Remote Desktop Client 1.2.4 executes a GUI application as root when it is started by an Apple Remote Desktop Administrator application, which allows remote authenticated users to execute arbitrary code when loginwindow is active via Fast User Switching.


Provide references for further information: Can you share references or external links related to CVE-2004-0962?

{'name': 'APPLE-SA-2004-10-27', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Oct/msg00002.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0962?


Explain the CVE ID: What does the identifier CVE-2004-0963 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0963.

Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause a denial of service (application exception) and possibly execute arbitrary code in winword.exe via certain unexpected values in a .doc file, including (1) an offset that triggers an out-of-bounds memory access, (2) a certain value that causes a large memory copy as triggered by an integer conversion error, and other values.


Provide references for further information: Can you share references or external links related to CVE-2004-0963?

{'name': 'MS05-023', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-023'}, {'name': 'oval:org.mitre.oval:def:2216', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2216'}, {'name': 'oval:org.mitre.oval:def:420', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A420'}, {'name': '20041006 [HV-HIGH] MS Word multiple exceptions, at least one exploitable', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109716247230733&w=2'}, {'name': 'oval:org.mitre.oval:def:2105', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2105'}, {'name': 'oval:org.mitre.oval:def:1795', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1795'}, {'name': 'word-file-parsing-bo(17635)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17635'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0963?


Explain the CVE ID: What does the identifier CVE-2004-0964 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0964.

Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file.


Provide references for further information: Can you share references or external links related to CVE-2004-0964?

{'name': '20040927 Re: Buffer overflow in Zinf 2.2.1 for Win32+exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109638486728548&w=2'}, {'name': '11248', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11248'}, {'name': '12656', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12656'}, {'name': '20040924 Buffer overflow in Zinf 2.2.1 for Win32', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109608092609200&w=2'}, {'name': '8341', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8341'}, {'name': 'zinf-pls-bo(17491)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17491'}, {'name': 'DSA-587', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-587'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0964?


Explain the CVE ID: What does the identifier CVE-2004-0965 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0965.

stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.


Provide references for further information: Can you share references or external links related to CVE-2004-0965?

{'name': 'hpux-stmkfont-gain-privileges(17813)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17813'}, {'name': '11493', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11493'}, {'name': '20041021 NSFOCUS SA2004-02 : HP-UX stmkfont Local Privilege Escalation Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109837243713696&w=2'}, {'name': 'oval:org.mitre.oval:def:5538', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5538'}, {'name': 'SSRT4807', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/7351'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nsfocus.com/english/homepage/research/0402.htm'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0965?


Explain the CVE ID: What does the identifier CVE-2004-0966 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0966.

The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2004-0966?

{'name': 'FLSA:136323', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00000.html'}, {'name': 'OpenPKG-SA-2004.055', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://marc.info/?l=bugtraq&m=110382652226638&w=2'}, {'name': 'GLSA-200410-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200410-10.xml'}, {'name': 'script-temporary-file-overwrite(17583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17583'}, {'name': '11282', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11282'}, {'name': '2004-0050', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0050'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136323'}, {'name': 'USN-5-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-5-1/'}, {'name': 'MDKSA-2006:051', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:051'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0966?


Explain the CVE ID: What does the identifier CVE-2004-0967 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0967.

The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2004-0967?

{'name': 'oval:org.mitre.oval:def:10284', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10284'}, {'name': 'script-temporary-file-overwrite(17583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17583'}, {'name': '19799', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19799'}, {'name': '2004-0050', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0050'}, {'name': '20056', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20056'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136321'}, {'name': 'SCOSA-2006.23', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.23/SCOSA-2006.23.txt'}, {'name': '16997', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/16997'}, {'name': 'RHSA-2005:081', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-081.html'}, {'name': '17135', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17135'}, {'name': 'USN-3-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-3-1/'}, {'name': '11285', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11285'}, {'name': 'SCOSA-2006.19', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.19/SCOSA-2006.19.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0967?


Explain the CVE ID: What does the identifier CVE-2004-0968 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0968.

The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2004-0968?

{'name': 'DSA-636', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-636'}, {'name': 'oval:org.mitre.oval:def:9523', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9523'}, {'name': 'RHSA-2005:261', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-261.html'}, {'name': 'script-temporary-file-overwrite(17583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17583'}, {'name': '11286', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11286'}, {'name': 'USN-4-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-4-1/'}, {'name': 'GLSA-200410-19', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200410-19.xml'}, {'name': '2004-0050', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0050'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136318'}, {'name': 'RHSA-2004:586', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-586.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0968?


Explain the CVE ID: What does the identifier CVE-2004-0969 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0969.

The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2004-0969?

{'name': 'GLSA-200411-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-15.xml'}, {'name': 'script-temporary-file-overwrite(17583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17583'}, {'name': 'MDKSA-2006:038', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:038'}, {'name': '11287', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11287'}, {'name': '2004-0050', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0050'}, {'name': '18764', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18764'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136313'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0969?


Explain the CVE ID: What does the identifier CVE-2004-0970 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0970.

The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files.  NOTE: the znew vulnerability may overlap CVE-2003-0367.


Provide references for further information: Can you share references or external links related to CVE-2004-0970?

{'name': 'script-temporary-file-overwrite(17583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17583'}, {'name': '11288', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11288'}, {'name': '2004-0050', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0050'}, {'name': 'DSA-588', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-588'}, {'name': '13131', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13131'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zataz.net/adviso/ncompress-09052005.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0970?


Explain the CVE ID: What does the identifier CVE-2004-0971 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0971.

The krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2004-0971?

{'name': 'script-temporary-file-overwrite(17583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17583'}, {'name': '2004-0050', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0050'}, {'name': '11289', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11289'}, {'name': 'GLSA-200410-24', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200410-24.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136304'}, {'name': 'RHSA-2005:012', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-012.html'}, {'name': 'oval:org.mitre.oval:def:10497', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10497'}, {'name': '[guacamole-issues] 20210618 [jira] [Created] (GUACAMOLE-1368) Latest docker image fails security scans.', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0971?


Explain the CVE ID: What does the identifier CVE-2004-0972 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0972.

The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2004-0972?

{'name': '11290', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11290'}, {'name': 'script-temporary-file-overwrite(17583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17583'}, {'name': 'oval:org.mitre.oval:def:10632', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10632'}, {'name': '2004-0050', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0050'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136308'}, {'name': 'RHBA-2004:232', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHBA-2004-232.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0972?


Explain the CVE ID: What does the identifier CVE-2004-0973 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0973.


Provide references for further information: Can you share references or external links related to CVE-2004-0973?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0973?


Explain the CVE ID: What does the identifier CVE-2004-0974 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0974.

The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2004-0974?

{'name': 'script-temporary-file-overwrite(17583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17583'}, {'name': '2004-0050', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0050'}, {'name': 'GLSA-200410-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200410-25.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0974?


Explain the CVE ID: What does the identifier CVE-2004-0975 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0975.

The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2004-0975?

{'name': 'GLSA-200411-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-15.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136302'}, {'name': 'script-temporary-file-overwrite(17583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17583'}, {'name': '2004-0050', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0050'}, {'name': 'oval:org.mitre.oval:def:164', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A164'}, {'name': 'DSA-603', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-603'}, {'name': 'RHSA-2005:476', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-476.html'}, {'name': '11293', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11293'}, {'name': 'oval:org.mitre.oval:def:10621', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10621'}, {'name': '12973', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12973'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0975?


Explain the CVE ID: What does the identifier CVE-2004-0976 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0976.

Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2004-0976?

{'name': 'RHSA-2005:881', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-881.html'}, {'name': 'script-temporary-file-overwrite(17583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17583'}, {'name': '18075', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18075'}, {'name': '2004-0050', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0050'}, {'name': 'oval:org.mitre.oval:def:9752', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9752'}, {'name': 'DSA-620', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-620'}, {'name': 'FLSA-2006:152845', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/updates/FEDORA--.shtml'}, {'name': 'OpenPKG-SA-2005.001', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://marc.info/?l=bugtraq&m=110547693019788&w=2'}, {'name': 'MDKSA-2005:031', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:031'}, {'name': '17661', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17661'}, {'name': '11294', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11294'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0976?


Explain the CVE ID: What does the identifier CVE-2004-0977 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0977.

The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2004-0977?

{'name': '11295', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11295'}, {'name': 'DSA-577', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-577'}, {'name': 'oval:org.mitre.oval:def:11360', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11360'}, {'name': 'MDKSA-2004:149', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:149'}, {'name': 'script-temporary-file-overwrite(17583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17583'}, {'name': '2004-0050', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0050'}, {'name': 'GLSA-200410-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200410-16.xml'}, {'name': 'USN-6-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-6-1/'}, {'name': 'OpenPKG-SA-2004.046', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://marc.info/?l=bugtraq&m=109910073808903&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136300'}, {'name': 'RHSA-2004:489', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-489.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0977?


Explain the CVE ID: What does the identifier CVE-2004-0978 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0978.

Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online gaming sites that are associated with MSN, allows remote attackers to execute arbitrary code via the SetupData parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-0978?

{'name': '20050119 MSN Heartbeat Control Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110616221411579&w=2'}, {'name': 'VU#673134', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/673134'}, {'name': 'MS04-038', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038'}, {'name': 'heartbeat-activex(17714)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17714'}, {'name': '11367', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11367'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/heartbeatfull.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0978?


Explain the CVE ID: What does the identifier CVE-2004-0979 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0979.

Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operations that are inconsistent with the user's intended configuration.


Provide references for further information: Can you share references or external links related to CVE-2004-0979?

{'name': 'MS04-038', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038'}, {'name': 'ie-dragdrop-security-bypass(17820)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17820'}, {'name': 'TA04-293A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-293A.html'}, {'name': 'VU#630720', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/630720'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0979?


Explain the CVE ID: What does the identifier CVE-2004-0980 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0980.

Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with certain service types in use, allows remote servers to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0980?

{'name': 'eziupdate-showmessage-format-string(18032)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18032'}, {'name': 'DSA-592', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-592'}, {'name': '13167', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13167/'}, {'name': '11657', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11657'}, {'name': 'GLSA-200411-20', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-20.xml'}, {'name': 'MDKSA-2004:129', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:129'}, {'name': '20041111 ez-ipupdate format string bug', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028590.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0980?


Explain the CVE ID: What does the identifier CVE-2004-0981 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0981.

Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file.


Provide references for further information: Can you share references or external links related to CVE-2004-0981?

{'name': '11548', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.org/bid/11548'}, {'name': 'imagemagick-exif-image-bo(17903)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17903'}, {'name': '12995', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12995/'}, {'name': 'USN-7-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-7-1/'}, {'name': 'GLSA-200411-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200411-11.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.imagemagick.org/www/Changelog.html'}, {'name': 'oval:org.mitre.oval:def:10472', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10472'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0981?


Explain the CVE ID: What does the identifier CVE-2004-0982 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0982.

Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ (at sign) in a URL.


Provide references for further information: Can you share references or external links related to CVE-2004-0982?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.barrossecurity.com/advisories/mpg123_getauthfromurl_bof_advisory.txt'}, {'name': '1011832', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011832'}, {'name': '12908', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12908'}, {'name': 'GLSA-200410-27', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200410-27.xml'}, {'name': '20041019 mpg123 "getauthfromurl" buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109834486312407&w=2'}, {'name': '11023', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/11023'}, {'name': 'mpg123-getauthfromurl-bo(17574)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17574'}, {'name': '11468', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11468'}, {'name': 'DSA-578', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-578'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0982?


Explain the CVE ID: What does the identifier CVE-2004-0983 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0983.

The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request.


Provide references for further information: Can you share references or external links related to CVE-2004-0983?

{'name': 'RHSA-2004:635', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-635.html'}, {'name': 'MDKSA-2004:128', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:128'}, {'name': '11618', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11618'}, {'name': 'oval:org.mitre.oval:def:10268', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10268'}, {'name': 'USN-20-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/20-1/'}, {'name': 'DSA-586', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-586'}, {'name': 'ruby-cgi-dos(17985)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17985'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0983?


Explain the CVE ID: What does the identifier CVE-2004-0984 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0984.

Unknown vulnerability in the dotlock implementation in mailutils before 1:0.5-4 on Debian GNU/Linux allows attackers to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2004-0984?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0984?


Explain the CVE ID: What does the identifier CVE-2004-0985 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0985.

Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable file type such as .xml, .doc, .py, .cdf, .css, .pdf, or .ppt, and using ADODB.Connection and ADODB.recordset to write to a .hta file that is interpreted in the Local Zone by HTML Help.


Provide references for further information: Can you share references or external links related to CVE-2004-0985?

{'name': '20041020 How to Break Windows XP SP2 + Internet Explorer 6 SP2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109830296130857&w=2'}, {'name': '20041020 How to Break Windows XP SP2 + Internet Explorer 6 SP2', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=109828076802478&w=2'}, {'name': 'ie-anchorclick-command-execution(17824)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17824'}, {'name': '20041020 Re: How to Break Windows XP SP2 + Internet Explorer 6 SP2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109829111200055&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0985?


Explain the CVE ID: What does the identifier CVE-2004-0986 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0986.

Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall rules to fail to load and protect the system from remote attackers.


Provide references for further information: Can you share references or external links related to CVE-2004-0986?

{'name': '11570', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11570'}, {'name': 'FLSA:2252', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2252'}, {'name': 'DSA-580', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-580'}, {'name': 'iptables-module-dos(17928)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17928'}, {'name': 'MDKSA-2004:125', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:125'}, {'name': 'P-026', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-026.shtml'}, {'name': 'USN-81-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-81-1/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://rpmfind.net/linux/RPM/suse/updates/9.2/i386/rpm/i586/iptables-1.2.11-4.2.i586.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0986?


Explain the CVE ID: What does the identifier CVE-2004-0987 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0987.

Buffer overflow in the process_menu function in yardradius 1.0.20 allows remote attackers to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0987?

{'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278384'}, {'name': 'DSA-598', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-598'}, {'name': '11753', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11753'}, {'name': 'yardradius-processmenu-bo(18270)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18270'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0987?


Explain the CVE ID: What does the identifier CVE-2004-0988 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0988.

Integer overflow on Apple QuickTime before 6.5.2, when running on Windows systems, allows remote attackers to cause a denial of service (memory consumption) via certain inputs that cause a large memory operation.


Provide references for further information: Can you share references or external links related to CVE-2004-0988?

{'name': 'APPLE-SA-2004-10-27', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Oct/msg00001.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0988?


Explain the CVE ID: What does the identifier CVE-2004-0989 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0989.

Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.


Provide references for further information: Can you share references or external links related to CVE-2004-0989?

{'name': 'APPLE-SA-2005-01-25', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html'}, {'name': '20041026 libxml2 remote buffer overflows (not in xml parsing code though)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109880813013482&w=2'}, {'name': 'P-029', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-029.shtml'}, {'name': '11179', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/11179'}, {'name': '1011941', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011941'}, {'name': 'RHSA-2004:615', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-615.html'}, {'name': '11526', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11526'}, {'name': 'oval:org.mitre.oval:def:10505', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10505'}, {'name': 'libxml2-nanoftp-file-bo(17872)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17872'}, {'name': 'RHSA-2004:650', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-650.html'}, {'name': 'GLSA-200411-05', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-05.xml'}, {'name': 'CLA-2004:890', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000890'}, {'name': '11324', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/11324'}, {'name': 'SUSE-SR:2005:001', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_01_sr.html'}, {'name': 'oval:org.mitre.oval:def:1173', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1173'}, {'name': 'USN-89-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-89-1/'}, {'name': '13000', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13000'}, {'name': 'DSA-582', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-582'}, {'name': 'libxml2-xmlnanoftpscanurl-bo(17870)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17870'}, {'name': 'libxml2-xmlnanoftpscanproxy-bo(17875)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17875'}, {'name': '11180', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/11180'}, {'name': 'libxml2-nanohttp-file-bo(17876)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17876'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0989?


Explain the CVE ID: What does the identifier CVE-2004-0990 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0990.

Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.


Provide references for further information: Can you share references or external links related to CVE-2004-0990?

{'name': 'P-071', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-071.shtml'}, {'name': '23783', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23783'}, {'name': '11190', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/11190'}, {'name': '21050', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21050'}, {'name': '11523', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11523'}, {'name': 'gd-png-bo(17866)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17866'}, {'name': 'RHSA-2004:638', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-638.html'}, {'name': 'DSA-602', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-602'}, {'name': 'MDKSA-2006:113', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:113'}, {'name': 'oval:org.mitre.oval:def:1260', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1260'}, {'name': 'SUSE-SR:2006:003', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html'}, {'name': '2004-0058', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0058'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.rpath.com/browse/RPL-939'}, {'name': 'DSA-589', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-589'}, {'name': 'MDKSA-2006:114', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:114'}, {'name': 'DSA-601', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-601'}, {'name': 'MDKSA-2004:132', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:132'}, {'name': '18717', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18717'}, {'name': 'MDKSA-2006:122', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:122'}, {'name': 'USN-25-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-25-1/'}, {'name': 'oval:org.mitre.oval:def:9952', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9952'}, {'name': '20041026 libgd integer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109882489302099&w=2'}, {'name': 'USN-11-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-11-1/'}, {'name': '20824', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20824'}, {'name': 'DSA-591', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-591'}, {'name': '20866', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20866'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0990?


Explain the CVE ID: What does the identifier CVE-2004-0991 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0991.

Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files.


Provide references for further information: Can you share references or external links related to CVE-2004-0991?

{'name': '13899', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13899'}, {'name': 'GLSA-200501-14', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200501-14.xml'}, {'name': 'MDKSA-2005:009', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:009'}, {'name': '12218', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12218'}, {'name': '13779', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13779'}, {'name': '13788', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13788'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0991?


Explain the CVE ID: What does the identifier CVE-2004-0992 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0992.

Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer.


Provide references for further information: Can you share references or external links related to CVE-2004-0992?

{'name': '11592', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11592'}, {'name': 'proxytunnel-message-format-string(17945)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17945'}, {'name': 'GLSA-200411-07', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-07.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://proxytunnel.sourceforge.net/news.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0992?


Explain the CVE ID: What does the identifier CVE-2004-0993 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0993.

Buffer overflow in hpsockd before 0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0993?

{'name': 'hpsockd-bo(18359)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18359'}, {'name': '13371', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13371/'}, {'name': '11800', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11800'}, {'name': 'DSA-604', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-604'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0993?


Explain the CVE ID: What does the identifier CVE-2004-0994 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0994.

Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c.  NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer.  Therefore, they should be regarded as distinct.


Provide references for further information: Can you share references or external links related to CVE-2004-0994?

{'name': '20041213 Multiple Vendor xzgv PRF Parsing Integer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://marc.info/?l=bugtraq&m=110297198402077&w=2'}, {'name': 'DSA-614', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-614'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://rus.members.beeb.net/xzgv-0.8-integer-overflow-fix.diff'}, {'name': 'xzgv-readprffile-bo(18454)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18454'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0994?


Explain the CVE ID: What does the identifier CVE-2004-0995 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0995.


Provide references for further information: Can you share references or external links related to CVE-2004-0995?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0995?


Explain the CVE ID: What does the identifier CVE-2004-0996 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0996.

main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.


Provide references for further information: Can you share references or external links related to CVE-2004-0996?

{'name': 'cscope-tmp-race-condition(18125)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18125'}, {'name': 'ADV-2007-2732', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/2732'}, {'name': '20041118 Re: RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/381611'}, {'name': 'APPLE-SA-2007-07-31', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html'}, {'name': '20041117 RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/381443'}, {'name': '11697', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11697'}, {'name': 'DSA-610', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-610'}, {'name': '20041124 STG Security Advisory: [SSA-20041122-09] cscope insecure temp file creation vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110133485519690&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=306172'}, {'name': '20041118 Re: RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/381506'}, {'name': '25159', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/25159'}, {'name': 'GLSA-200412-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-11.xml'}, {'name': '26235', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/26235'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0996?


Explain the CVE ID: What does the identifier CVE-2004-0997 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0997.

Unspecified vulnerability in the ptrace MIPS assembly code in Linux kernel 2.4 before 2.4.17 allows local users to gain privileges via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2004-0997?

{'name': '20163', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20163'}, {'name': 'DSA-1082', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1082'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes'}, {'name': 'DSA-1070', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1070'}, {'name': '20162', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20162'}, {'name': 'DSA-1067', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1067'}, {'name': 'DSA-1069', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1069'}, {'tags': ['x_refsource_MISC'], 'url': 'http://svn.debian.org/wsvn/kernel/patch-tracking/CVE-2004-0997?op=file&rev=0&sc=0'}, {'name': '20202', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20202'}, {'name': '18176', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/18176'}, {'name': '20338', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20338'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0997?


Explain the CVE ID: What does the identifier CVE-2004-0998 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0998.

Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0998?

{'name': 'VU#995038', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/995038'}, {'name': 'DSA-616', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-616'}, {'name': '13663', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13663'}, {'name': 'netkit-telnetssl-format-string(18654)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18654'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0998?


Explain the CVE ID: What does the identifier CVE-2004-0999 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0999.

zgv 5.5.3 allows remote attackers to cause a denial of service (application crash via segmentation fault) via crafted multiple-image (animated) GIF images.


Provide references for further information: Can you share references or external links related to CVE-2004-0999?

{'name': 'DSA-608', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-608'}, {'name': 'zgv-multiple-image-dos(18480)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18480'}, {'name': '11915', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11915'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0999?


Explain the CVE ID: What does the identifier CVE-2004-1000 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1000.

lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack.


Provide references for further information: Can you share references or external links related to CVE-2004-1000?

{'name': 'lintian-symlink(18808)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18808'}, {'name': '13771', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13771'}, {'name': 'DSA-630', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-630'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1000?


Explain the CVE ID: What does the identifier CVE-2004-1001 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1001.

Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pam_chauthtok function call is not properly handled.


Provide references for further information: Can you share references or external links related to CVE-2004-1001?

{'name': '13028', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13028'}, {'name': 'DSA-585', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-585'}, {'name': 'CLA-2004:894', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000894'}, {'name': 'shadow-pwdcheck-modify-account(17902)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17902'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1001?


Explain the CVE ID: What does the identifier CVE-2004-1002 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1002.

Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppd to access an incorrect memory location.


Provide references for further information: Can you share references or external links related to CVE-2004-1002?

{'name': 'USN-12-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-12-1/'}, {'name': 'ppp-ccp-headers-dos(17874)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17874'}, {'name': '20041026 pppd out of bounds memory access, possible DOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/379450'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1002?


Explain the CVE ID: What does the identifier CVE-2004-1003 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1003.

Trend ScanMail allows remote attackers to obtain potentially sensitive information or disable the anti-virus capability via the smency.nsf file.


Provide references for further information: Can you share references or external links related to CVE-2004-1003?

{'name': 'scanmail-file-access(17962)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17962'}, {'tags': ['x_refsource_MISC'], 'url': 'http://cgi.nessus.org/plugins/dump.php3?id=14312'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1003?


Explain the CVE ID: What does the identifier CVE-2004-1004 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1004.

Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact.


Provide references for further information: Can you share references or external links related to CVE-2004-1004?

{'name': '13863', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13863/'}, {'name': 'midnightcommander-format-string(18902)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18902'}, {'name': 'RHSA-2005:217', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-217.html'}, {'name': 'DSA-639', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-639'}, {'name': 'GLSA-200502-24', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-24.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1004?


Explain the CVE ID: What does the identifier CVE-2004-1005 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1005.

Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact.


Provide references for further information: Can you share references or external links related to CVE-2004-1005?

{'name': '13863', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13863/'}, {'name': 'midnight-commander-bo(18898)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18898'}, {'name': 'RHSA-2005:217', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-217.html'}, {'name': 'DSA-639', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-639'}, {'name': 'GLSA-200502-24', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-24.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1005?


Explain the CVE ID: What does the identifier CVE-2004-1006 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1006.

Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702.


Provide references for further information: Can you share references or external links related to CVE-2004-1006?

{'name': '20041105 Re: debian dhcpd, old format string bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109968710822449&w=2'}, {'name': 'VU#448384', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/448384'}, {'name': '11591', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11591'}, {'name': '20041025 debian dhcpd, old format string bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2004-10/0287.html'}, {'name': 'DSA-584', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-584'}, {'name': 'dhcp-log-format-string(17963)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17963'}, {'name': '20041102 Re: debian dhcpd, old format string bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2004-11/0037.html'}, {'name': 'RHSA-2005:212', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-212.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1006?


Explain the CVE ID: What does the identifier CVE-2004-1007 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1007.

The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service (application crash) via mail headers that cause a line feed (LF) to be replaced by a null byte that is written to an incorrect memory address.


Provide references for further information: Can you share references or external links related to CVE-2004-1007?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bogofilter.sourceforge.net/security/bogofilter-SA-2004-01'}, {'name': 'bogofilter-dos(17916)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17916'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1007?


Explain the CVE ID: What does the identifier CVE-2004-1008 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1008.

Integer signedness error in the ssh2_rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2_MSG_DEBUG packet with a modified stringlen parameter, which leads to a buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2004-1008?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002414'}, {'name': '13012', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13012/'}, {'name': '20041027 PuTTY SSH2_MSG_DEBUG Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=155&type=vulnerabilities&flashstatus=true'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.chiark.greenend.org.uk/~sgtatham/putty/'}, {'name': 'putty-ssh2msgdebug-bo(17886)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17886'}, {'name': '12987', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12987/'}, {'name': '11549', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11549'}, {'name': '20041027 PuTTY SSH client vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109889312917613&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002416'}, {'name': '17214', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17214'}, {'name': 'GLSA-200410-29', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200410-29.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1008?


Explain the CVE ID: What does the identifier CVE-2004-1009 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1009.

Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2004-1009?

{'name': 'midnight-commander-dos(18903)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18903'}, {'name': '13863', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13863/'}, {'name': 'DSA-639', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-639'}, {'name': 'RHSA-2005:512', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-512.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1009?


Explain the CVE ID: What does the identifier CVE-2004-1010 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1010.

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname.


Provide references for further information: Can you share references or external links related to CVE-2004-1010?

{'name': '11603', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11603'}, {'name': 'P-072', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-072.shtml'}, {'name': 'oval:org.mitre.oval:def:9848', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9848'}, {'name': 'infozip-compressed-folder-bo(17956)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17956'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.info-zip.org/FAQ.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hexview.com/docs/20041103-1.txt'}, {'name': 'FLSA:2255', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2255'}, {'name': 'TLSA-2005-18', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://www.turbolinux.com/security/2005/TLSA-2005-18.txt'}, {'name': 'DSA-624', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-624'}, {'name': 'GLSA-200411-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200411-16.xml'}, {'name': 'RHSA-2004:634', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-634.html'}, {'name': '13094', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13094/'}, {'name': 'MDKSA-2004:141', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:141'}, {'name': 'USN-18-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/18-1/'}, {'name': '20041103 [HV-MED] Zip/Linux long path buffer overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028379.html'}, {'name': '20041103 [HV-MED] Zip/Linux long path buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109958840611053&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1010?


Explain the CVE ID: What does the identifier CVE-2004-1011 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1011.

Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015.


Provide references for further information: Can you share references or external links related to CVE-2004-1011?

{'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/152004.html'}, {'name': 'cyrus-imap-username-bo(18198)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18198'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://asg.web.cmu.edu/cyrus/download/imapd/changes.html'}, {'name': 'MDKSA-2004:139', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:139'}, {'name': '20041122 Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110123023521619&w=2'}, {'name': '[cyrus-announce] 20041122 Cyrus IMAPd 2.2.9 Released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=143'}, {'name': '13274', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13274/'}, {'name': 'GLSA-200411-34', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200411-34.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1011?


Explain the CVE ID: What does the identifier CVE-2004-1012 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1012.

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index increment error that leads to an out-of-bounds memory corruption.


Provide references for further information: Can you share references or external links related to CVE-2004-1012?

{'name': 'DSA-597', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-597'}, {'name': 'cyrus-imap-commands-execute-code(18199)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18199'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/152004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://asg.web.cmu.edu/cyrus/download/imapd/changes.html'}, {'name': 'MDKSA-2004:139', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:139'}, {'name': '20041122 Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110123023521619&w=2'}, {'name': '[cyrus-announce] 20041122 Cyrus IMAPd 2.2.9 Released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=143'}, {'name': '13274', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13274/'}, {'name': 'GLSA-200411-34', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200411-34.xml'}, {'name': 'USN-31-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-31-1/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1012?


Explain the CVE ID: What does the identifier CVE-2004-1013 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1013.

The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an index increment error that leads to an out-of-bounds memory corruption.


Provide references for further information: Can you share references or external links related to CVE-2004-1013?

{'name': 'DSA-597', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-597'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/152004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://asg.web.cmu.edu/cyrus/download/imapd/changes.html'}, {'name': 'MDKSA-2004:139', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:139'}, {'name': '20041122 Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110123023521619&w=2'}, {'name': '[cyrus-announce] 20041122 Cyrus IMAPd 2.2.9 Released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=143'}, {'name': '13274', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13274/'}, {'name': 'GLSA-200411-34', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200411-34.xml'}, {'name': 'USN-31-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-31-1/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1013?


Explain the CVE ID: What does the identifier CVE-2004-1014 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1014.

statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.


Provide references for further information: Can you share references or external links related to CVE-2004-1014?

{'name': 'DSA-606', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-606'}, {'name': 'RHSA-2005:014', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-014.html'}, {'name': 'RHSA-2004:583', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-583.html'}, {'name': '11785', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11785'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258&view=markup'}, {'name': 'FLSA-2006:138098', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/426072/30/6740/threaded'}, {'name': 'oval:org.mitre.oval:def:10899', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10899'}, {'name': 'USN-36-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-36-1/'}, {'name': '2004-0065', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0065/'}, {'name': 'nfs-utils-statd-dos(18332)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18332'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1014?


Explain the CVE ID: What does the identifier CVE-2004-1015 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1015.

Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004-1011.


Provide references for further information: Can you share references or external links related to CVE-2004-1015?

{'name': 'cyrus-magic-plus-bo(18274)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18274'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://asg.web.cmu.edu/cyrus/download/imapd/changes.html'}, {'name': 'MDKSA-2004:139', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:139'}, {'name': '[cyrus-announce] 20041123 Cyrus IMAPd 2.2.10 Released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=145'}, {'name': 'GLSA-200411-34', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200411-34.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1015?


Explain the CVE ID: What does the identifier CVE-2004-1016 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1016.

The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users to cause a denial of service (system hang) via crafted auxiliary messages that are passed to the sendmsg function, which causes a deadlock condition.