Provide references for further information: Can you share references or external links related to CVE-2004-0361?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.insecure.ws/article.php?story=2004021918172533'}, {'name': 'safari-array-dos(15413)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15413'}, {'name': '20040306 Safari javascript array overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107861828510106&w=2'}, {'name': '9815', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9815'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0361?


Explain the CVE ID: What does the identifier CVE-2004-0362 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0362.

Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a SRV_USER_ONLINE response packet and a SRV_META_USER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm.


Provide references for further information: Can you share references or external links related to CVE-2004-0362?

{'name': '20040318 Vulnerability in ICQ Parsing in ISS Products', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/xforce/alerts/id/166'}, {'name': '9913', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9913'}, {'name': '11073', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11073'}, {'name': 'O-104', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-104.shtml'}, {'name': 'AD20040318', 'tags': ['third-party-advisory', 'x_refsource_EEYE'], 'url': 'http://www.eeye.com/html/Research/Advisories/AD20040318.html'}, {'name': 'pam-icq-parsing-bo(15442)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15442'}, {'name': '4355', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4355'}, {'name': 'VU#947254', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/947254'}, {'name': '20040318 EEYE: Internet Security Systems PAM ICQ Server Response Processing Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107965651712378&w=2'}, {'name': 'witty-worm-propagation(15543)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15543'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0362?


Explain the CVE ID: What does the identifier CVE-2004-0363 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0363.

Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method.


Provide references for further information: Can you share references or external links related to CVE-2004-0363?

{'name': '20040319 Ref: NGSSoftware Advisories NISR19042004a and NISR19042004b', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107980262324362&w=2'}, {'name': '11169', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11169'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/antispam.txt'}, {'name': 'nas-launchcustomrulewizard-bo(15536)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15536'}, {'name': '20040319 Norton AntiSpam Remote Buffer Overrun (#NISR19042004a)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107970870606638&w=2'}, {'name': 'VU#344718', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/344718'}, {'name': '9916', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9916'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sarc.com/avcenter/security/Content/2004.03.19.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0363?


Explain the CVE ID: What does the identifier CVE-2004-0364 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0364.

The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method.


Provide references for further information: Can you share references or external links related to CVE-2004-0364?

{'name': '9915', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9915'}, {'name': '20040319 Ref: NGSSoftware Advisories NISR19042004a and NISR19042004b', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107980262324362&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/nisrce.txt'}, {'name': '11168', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11168'}, {'name': '20040319 Norton Internet Security Remote Command Execution (#NISR19042004b)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107970885922442&w=2'}, {'name': 'VU#549054', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/549054'}, {'name': 'norton-is-launchurl-command-execution(15538)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15538'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sarc.com/avcenter/security/Content/2004.03.19.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0364?


Explain the CVE ID: What does the identifier CVE-2004-0365 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0365.

The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a malformed RADIUS packet that triggers a null dereference.


Provide references for further information: Can you share references or external links related to CVE-2004-0365?

{'name': 'GLSA-200403-07', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200403-07.xml'}, {'name': 'RHSA-2004:137', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-137.html'}, {'name': 'RHSA-2004:136', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-136.html'}, {'name': '11185', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11185'}, {'name': '20040329 LNSA-#2004-0007: Multiple security problems in Ethereal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108058005324316&w=2'}, {'name': 'CLA-2004:835', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000835'}, {'name': 'oval:org.mitre.oval:def:891', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A891'}, {'name': 'oval:org.mitre.oval:def:9196', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9196'}, {'name': 'oval:org.mitre.oval:def:879', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A879'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00013.html'}, {'name': '20040416 [OpenPKG-SA-2004.015] OpenPKG Security Advisory (ethereal)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108213710306260&w=2'}, {'name': 'VU#124454', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/124454'}, {'name': '[ethereal-dev] 20040318 ethereal radius dissector vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=ethereal-dev&m=107962966700423&w=2'}, {'name': 'ethereal-radius-dos(15571)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15571'}, {'name': 'MDKSA-2004:024', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:024'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0365?


Explain the CVE ID: What does the identifier CVE-2004-0366 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0366.

SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statements.


Provide references for further information: Can you share references or external links related to CVE-2004-0366?

{'name': '10266', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10266'}, {'name': '11237', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11237'}, {'name': 'pam-pgsql-sql-injection(15651)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15651'}, {'name': 'DSA-469', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-469'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0366?


Explain the CVE ID: What does the identifier CVE-2004-0367 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0367.

Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Presentation protocol selector.


Provide references for further information: Can you share references or external links related to CVE-2004-0367?

{'name': 'GLSA-200403-07', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200403-07.xml'}, {'name': 'RHSA-2004:137', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-137.html'}, {'name': 'VU#792286', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/792286'}, {'name': 'RHSA-2004:136', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-136.html'}, {'name': '11185', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11185'}, {'name': '20040329 LNSA-#2004-0007: Multiple security problems in Ethereal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108058005324316&w=2'}, {'name': 'ethereal-zero-presentation-dos(15570)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15570'}, {'name': 'CLA-2004:835', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000835'}, {'name': '[Ethereal-dev] 20040416 Possibly incorrect CVE entry CAN-2004-0367', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.ethereal.com/lists/ethereal-dev/200404/msg00296.html'}, {'name': 'oval:org.mitre.oval:def:880', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A880'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00013.html'}, {'name': 'oval:org.mitre.oval:def:11071', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11071'}, {'name': 'oval:org.mitre.oval:def:905', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A905'}, {'name': 'MDKSA-2004:024', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:024'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0367?


Explain the CVE ID: What does the identifier CVE-2004-0368 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0368.

Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.


Provide references for further information: Can you share references or external links related to CVE-2004-0368?

{'name': 'cde-dtlogin-double-free(15581)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15581'}, {'name': '[Dailydave] 20040323 dtlogin advisory', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.immunitysec.com/pipermail/dailydave/2004-March/000402.html'}, {'name': '11210', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11210/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.immunitysec.com/downloads/dtlogin.sxw.pdf'}, {'name': '57539', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57539-1&searchclause=security'}, {'name': '20040323 how much fun can you have with UDP?', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0064.html'}, {'name': '20040801-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040801-01-P'}, {'name': '11214', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11214/'}, {'name': '9958', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9958'}, {'name': 'oval:org.mitre.oval:def:1436', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1436'}, {'name': '101478', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101478-1'}, {'name': 'HPSBUX01038', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.auscert.org.au/render.html?it=4103&cid=3734'}, {'name': '11495', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11495/'}, {'name': 'O-129', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-129.shtml'}, {'name': '11614', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11614/'}, {'name': 'VU#179804', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/179804'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0368?


Explain the CVE ID: What does the identifier CVE-2004-0369 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0369.

Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.


Provide references for further information: Can you share references or external links related to CVE-2004-0369?

{'name': 'ESB-2004.0538', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4339'}, {'name': 'isakmp-spi-size-bo(15669)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15669'}, {'name': '20040826 Entrust LibKmp Library Buffer Overflow', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/xforce/alerts/id/181'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html'}, {'name': 'O-206', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-206.shtml'}, {'name': '11039', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11039'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0369?


Explain the CVE ID: What does the identifier CVE-2004-0370 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0370.

The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause a system panic.


Provide references for further information: Can you share references or external links related to CVE-2004-0370?

{'name': '11233', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11233'}, {'name': 'freebsd-ipv6-dos(15662)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15662'}, {'name': '9992', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9992'}, {'name': 'FreeBSD-SA-04:06', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:06.ipv6.asc'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0370?


Explain the CVE ID: What does the identifier CVE-2004-0371 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0371.

Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the cross-realm trust path.


Provide references for further information: Can you share references or external links related to CVE-2004-0371?

{'name': 'GLSA-200404-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200404-09.xml'}, {'name': '20040530 009: SECURITY FIX: May 30, 2004', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/009_kerberos.patch'}, {'name': 'heimdal-cross-realm-spoofing(15701)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15701'}, {'name': 'FreeBSD-SA-04:08', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:08.heimdal.asc'}, {'name': 'DSA-476', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-476'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.pdc.kth.se/heimdal/advisory/2004-04-01/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0371?


Explain the CVE ID: What does the identifier CVE-2004-0372 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0372.

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts.


Provide references for further information: Can you share references or external links related to CVE-2004-0372?

{'name': '20040320 xine-check/xine-bugreport symlink vulnerability.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107997911025558&w=2'}, {'name': 'DSA-477', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-477'}, {'name': '9939', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9939'}, {'name': 'GLSA-200404-20', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200404-20.xml'}, {'name': 'xine-xinebugreport-xinecheck-symlink(15564)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15564'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0372?


Explain the CVE ID: What does the identifier CVE-2004-0374 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0374.

Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "__SQLUSER__" string.


Provide references for further information: Can you share references or external links related to CVE-2004-0374?

{'name': '[interchange-announce] 20040329 Security Problem in Interchange', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.icdevgroup.org/pipermail/interchange-announce/2004/000043.html'}, {'name': '10005', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10005'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ftp.icdevgroup.org/interchange/5.0/WHATSNEW'}, {'name': 'interchange-url-obtain-information(15670)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15670'}, {'name': '11234', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11234'}, {'name': 'DSA-471', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-471'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0374?


Explain the CVE ID: What does the identifier CVE-2004-0375 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0375.

SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero.


Provide references for further information: Can you share references or external links related to CVE-2004-0375?

{'name': '1009379', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009379'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/avcenter/security/Content/2004.04.20.html'}, {'name': '1009380', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009380'}, {'name': 'norton-firewalls-dos(15433)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15433'}, {'name': 'symantec-firewall-tcp-dos(15936)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15936'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.eeye.com/html/Research/Upcoming/20040309.html'}, {'name': '20040423 EEYE: Symantec Multiple Firewall TCP Options Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108275582432246&w=2'}, {'name': '9912', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9912'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0375?


Explain the CVE ID: What does the identifier CVE-2004-0376 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0376.

oftpd 0.3.6 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command with a large value.


Provide references for further information: Can you share references or external links related to CVE-2004-0376?

{'name': '11220', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11220'}, {'name': 'DSA-473', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-473'}, {'name': 'GLSA-200403-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200403-08.xml'}, {'name': 'oftpd-port-dos(15622)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15622'}, {'name': '9980', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9980'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.time-travellers.org/oftpd/oftpd-dos.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0376?


Explain the CVE ID: What does the identifier CVE-2004-0377 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0377.

Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end in a backslash character.


Provide references for further information: Can you share references or external links related to CVE-2004-0377?

{'name': 'perl-win32stat-bo(15732)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15732'}, {'name': '20040405 [Full-Disclosure] iDEFENSE Security Advisory 04.05.04: Perl win32_stat Function', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108118694327979&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://public.activestate.com/cgi-bin/perlbrowse?patch=22552'}, {'name': 'VU#722414', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/722414'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/application/poi/display?id=93&type=vulnerabilities'}, {'name': '20040405 iDEFENSE Security Advisory 04.05.04: Perl win32_stat Function', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019794.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0377?


Explain the CVE ID: What does the identifier CVE-2004-0378 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0378.


Provide references for further information: Can you share references or external links related to CVE-2004-0378?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0378?


Explain the CVE ID: What does the identifier CVE-2004-0379 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0379.

Multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary web content and steal cookies via certain server scripts.


Provide references for further information: Can you share references or external links related to CVE-2004-0379?

{'name': 'sharepoint-portal-xss(15729)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15729'}, {'name': '20040405 Multiple XSS vulnerabilities in Microsoft SharePoint Portal Server 2001', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108118352303273&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0379?


Explain the CVE ID: What does the identifier CVE-2004-0380 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0380.

The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the "MHTML URL Processing Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2004-0380?

{'name': 'oval:org.mitre.oval:def:990', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A990'}, {'name': '9105', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9105'}, {'name': 'VU#323070', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/323070'}, {'name': 'oval:org.mitre.oval:def:1010', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1010'}, {'name': 'outlook-mhtml-execute-code(15705)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15705'}, {'name': 'MS04-013', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-013'}, {'name': '9658', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9658'}, {'name': 'TA04-104A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-104A.html'}, {'name': 'oval:org.mitre.oval:def:882', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A882'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.k-otik.net/bugtraq/02.18.InternetExplorer.php'}, {'name': '20040328 IE ms-its: and mk:@MSITStore: vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/358913'}, {'name': '20040219 Microsoft Internet Explorer Unspecified CHM File Processing Arbitrary Code Execution Vulnerability (bid 9658)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/354447'}, {'name': 'oval:org.mitre.oval:def:1028', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1028'}, {'name': '10523', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10523'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0380?


Explain the CVE ID: What does the identifier CVE-2004-0381 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0381.

mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.


Provide references for further information: Can you share references or external links related to CVE-2004-0381?

{'name': 'oval:org.mitre.oval:def:11557', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11557'}, {'name': '9976', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9976'}, {'name': 'mysql-mysqlbug-symlink(15617)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15617'}, {'name': 'DSA-483', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-483'}, {'name': 'GLSA-200405-20', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-20.xml'}, {'name': 'MDKSA-2004:034', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:034'}, {'name': 'RHSA-2004:597', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-597.html'}, {'name': 'P-018', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-018.shtml'}, {'name': '20040414 [OpenPKG-SA-2004.014] OpenPKG Security Advisory (mysql)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108206802810402&w=2'}, {'name': 'RHSA-2004:569', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-569.html'}, {'name': '20040324 mysqlbug tmpfile/symlink vulnerability.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108023246916294&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0381?


Explain the CVE ID: What does the identifier CVE-2004-0382 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0382.

Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly related to a configuration file setting.


Provide references for further information: Can you share references or external links related to CVE-2004-0382?

{'name': 'macos-cups-configuration-unknown(15769)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15769'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00047.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=61798'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0382?


Explain the CVE ID: What does the identifier CVE-2004-0383 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0383.

Unknown vulnerability in Mail for Mac OS X 10.3.3 and 10.2.8, with unknown impact, related to "the handling of HTML-formatted email."


Provide references for further information: Can you share references or external links related to CVE-2004-0383?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00047.html'}, {'name': 'macos-mail-unknown(15768)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15768'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=61798'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0383?


Explain the CVE ID: What does the identifier CVE-2004-0385 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0385.

Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener.  NOTE: due to the vagueness of the Oracle advisory, it is not clear whether there are additional issues besides this overflow, although the advisory alludes to multiple "vulnerabilities."


Provide references for further information: Can you share references or external links related to CVE-2004-0385?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.inaccessnetworks.com/ian/services/secadv01.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/2004alert66.pdf'}, {'name': 'oracle-web-cache-vulnerabilities(15463)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15463'}, {'name': '4249', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4249'}, {'name': '11118', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11118'}, {'name': '20040408 Heap Overflow in Oracle 9iAS / 10g Application Server Web Cache', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108144419001770&w=2'}, {'name': 'VU#413006', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/413006'}, {'name': '20040316 new security alert #66 issued in Oracle web cache', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107945649127635&w=2'}, {'name': '20040408 Heap Overflow in Oracle 9iAS / 10g Application Server Web Cache', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0078.html'}, {'name': '9868', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9868'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0385?


Explain the CVE ID: What does the identifier CVE-2004-0386 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0386.

Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header.


Provide references for further information: Can you share references or external links related to CVE-2004-0386?

{'name': '11259', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11259'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mplayerhq.hu/homepage/design6/news.html'}, {'name': 'mplayer-header-bo(15675)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15675'}, {'name': '20040330 MPlayer Security Advisory #002 - HTTP parsing vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108067020624076&w=2'}, {'name': 'MDKSA-2004:026', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:026'}, {'name': 'VU#723910', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/723910'}, {'name': '10008', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10008'}, {'name': '20040330 Heap overflow in MPlayer', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/359025'}, {'name': 'GLSA-200403-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200403-13.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0386?


Explain the CVE ID: What does the identifier CVE-2004-0387 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0387.

Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allows remote attackers to execute arbitrary code via a malformed .R3T file.


Provide references for further information: Can you share references or external links related to CVE-2004-0387?

{'name': '4977', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/displayvuln.php?osvdb_id=4977'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.service.real.com/help/faq/security/040406_r3t/en/'}, {'name': '20040307 REAL One Player R3T File Format Stack Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108135350810135&w=2'}, {'name': 'realplayer-r3t-bo(15774)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15774'}, {'name': '20040307 REAL One Player R3T File Format Stack Overflow', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0077.html'}, {'name': '11314', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11314'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/realr3t.txt'}, {'name': '10070', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10070'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0387?


Explain the CVE ID: What does the identifier CVE-2004-0388 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0388.

The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack.


Provide references for further information: Can you share references or external links related to CVE-2004-0388?

{'name': '1009784', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009784'}, {'name': '11223', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11223/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev.mysql.com/doc/mysql/en/news-4-1-2.html'}, {'name': 'mysql-mysqldmulti-symlink(15883)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15883'}, {'name': 'DSA-483', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-483'}, {'name': 'GLSA-200405-20', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-20.xml'}, {'name': 'MDKSA-2004:034', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:034'}, {'name': 'RHSA-2004:597', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-597.html'}, {'name': 'P-018', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-018.shtml'}, {'name': '20040414 [OpenPKG-SA-2004.014] OpenPKG Security Advisory (mysql)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108206802810402&w=2'}, {'name': 'RHSA-2004:569', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-569.html'}, {'name': 'oval:org.mitre.oval:def:10559', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10559'}, {'name': '6421', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6421'}, {'name': '10142', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10142'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0388?


Explain the CVE ID: What does the identifier CVE-2004-0389 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0389.

RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GET_PARAMETER or (2) DESCRIBE requests.


Provide references for further information: Can you share references or external links related to CVE-2004-0389?

{'name': '11395', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11395'}, {'name': '20040415 RealNetworks Helix Universal Server Denial of Service Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=102&type=vulnerabilities'}, {'name': 'helix-get-dos(15880)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15880'}, {'name': '10157', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10157'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0389?


Explain the CVE ID: What does the identifier CVE-2004-0390 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0390.

SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthorized access to an X session via other X login methods.


Provide references for further information: Can you share references or external links related to CVE-2004-0390?

{'name': 'openserver-x-session-insecure(16113)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16113'}, {'name': '20040510 OpenServer 5.0.5 OpenServer 5.0.6 OpenServer 5.0.7 : X sessions which are not started by scologin cannot use the X authorization protocol', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0424.html'}, {'name': 'SCOSA-2004.5', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'http://www.securityfocus.com/advisories/6684'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0390?


Explain the CVE ID: What does the identifier CVE-2004-0391 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0391.

Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7 through 1.7.3 have a hardcoded username and password, which allows remote attackers to add new users, modify existing users, and change configuration.


Provide references for further information: Can you share references or external links related to CVE-2004-0391?

{'name': 'O-111', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-111.shtml'}, {'name': '20040407 A Default Username and Password in WLSE and HSE Devices', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040407-username.shtml'}, {'name': 'VU#659228', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/659228'}, {'name': '10076', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10076'}, {'name': 'cisco-default-password(15773)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15773'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0391?


Explain the CVE ID: What does the identifier CVE-2004-0392 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0392.

racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" fields.


Provide references for further information: Can you share references or external links related to CVE-2004-0392?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vuxml.org/freebsd/40fcf20f-8891-11d8-90d1-0020ed76ef5a.html'}, {'name': 'racoon-isakmp-dos(15893)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15893'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://orange.kame.net/dev/query-pr.cgi?pr=555'}, {'name': 'SCOSA-2005.10', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0392?


Explain the CVE ID: What does the identifier CVE-2004-0393 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0393.

Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved, which is provided to the syslog function.


Provide references for further information: Can you share references or external links related to CVE-2004-0393?

{'name': '20040624 Rlpr Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108810992313652&w=2'}, {'name': '10578', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10578'}, {'name': 'DSA-524', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-524'}, {'name': 'rlpr-msg-format-string(16453)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16453'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0393?


Explain the CVE ID: What does the identifier CVE-2004-0394 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0394.

A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic.


Provide references for further information: Can you share references or external links related to CVE-2004-0394?

{'name': '20163', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20163'}, {'name': 'DSA-1082', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1082'}, {'name': '10233', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10233'}, {'name': 'SuSE-SA:2004:010', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_10_kernel.html'}, {'name': 'DSA-1070', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1070'}, {'name': '20162', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20162'}, {'name': 'MDKSA-2004:037', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:037'}, {'name': 'linux-panic-bo(15953)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15953'}, {'name': '[fedora-announce] 20040422 Fedora alert FEDORA-2004-111 (kernel)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lwn.net/Articles/81773/'}, {'name': 'DSA-1067', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1067'}, {'name': 'CLA-2004:846', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846'}, {'name': 'DSA-1069', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1069'}, {'name': '20040504-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc'}, {'name': 'ESA-20040428-004', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html'}, {'name': '20040505-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040505-01-U.asc'}, {'name': '20202', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20202'}, {'name': 'GLSA-200407-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200407-02.xml'}, {'name': '20338', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20338'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0394?


Explain the CVE ID: What does the identifier CVE-2004-0395 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0395.

The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users to execute arbitrary commands via shell metacharacters in a system call.


Provide references for further information: Can you share references or external links related to CVE-2004-0395?

{'name': 'DSA-509', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-509'}, {'name': 'gatos-xatitv-gain-privileges(16273)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16273'}, {'name': '10437', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10437'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0395?


Explain the CVE ID: What does the identifier CVE-2004-0396 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0396.

Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.


Provide references for further information: Can you share references or external links related to CVE-2004-0396?

{'name': '11641', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11641'}, {'name': '11652', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11652'}, {'name': 'oval:org.mitre.oval:def:970', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A970'}, {'name': '20040519 [OpenPKG-SA-2004.022] OpenPKG Security Advisory (cvs)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108500040719512&w=2'}, {'name': 'oval:org.mitre.oval:def:9058', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9058'}, {'name': 'MDKSA-2004:048', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:048'}, {'name': '20040519 Advisory 07/2004: CVS remote vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://cert.uni-stuttgart.de/archive/bugtraq/2004/05/msg00219.html'}, {'name': '20040520 cvs server buffer overflow vulnerability', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://marc.info/?l=openbsd-security-announce&m=108508894405639&w=2'}, {'name': 'FreeBSD-SA-04:10', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:10.cvs.asc'}, {'name': 'RHSA-2004:190', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-190.html'}, {'name': '11674', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11674'}, {'name': 'GLSA-200405-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-12.xml'}, {'name': '11651', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11651'}, {'name': '6305', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6305'}, {'name': 'TA04-147A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-147A.html'}, {'name': 'O-147', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-147.shtml'}, {'name': '20040519 Advisory 07/2004: CVS remote vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108498454829020&w=2'}, {'name': '11647', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11647'}, {'name': 'FEDORA-2004-1620', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=108636445031613&w=2'}, {'name': 'VU#192038', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/192038'}, {'name': '20040519 Advisory 07/2004: CVS remote vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0980.html'}, {'name': 'DSA-505', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-505'}, {'name': 'cvs-entry-line-bo(16193)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16193'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/072004.html'}, {'name': 'SSA:2004-140-01', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.395865'}, {'name': 'NetBSD-SA2004-008', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2004-008.txt.asc'}, {'name': '10384', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10384'}, {'name': 'SuSE-SA:2004:013', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021742.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0396?


Explain the CVE ID: What does the identifier CVE-2004-0397 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0397.

Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a (1) DAV2 REPORT query or (2) get-dated-rev svn-protocol command.


Provide references for further information: Can you share references or external links related to CVE-2004-0397?

{'name': '10386', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10386'}, {'name': 'FLSA:1748', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=1748'}, {'name': '20040519 Advisory 08/2004: Subversion remote vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021737.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://subversion.tigris.org/svn-sscanf-advisory.txt'}, {'name': '20040519 Advisory 08/2004: Subversion remote vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108498676517697&w=2'}, {'name': '20040519 [OpenPKG-SA-2004.023] OpenPKG Security Advisory (subversion)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/363814'}, {'name': 'FEDORA-2004-128', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.linuxsecurity.com/advisories/fedora_advisory-4373.html'}, {'name': 'GLSA-200405-14', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200405-14.xml'}, {'name': '6301', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6301'}, {'name': '11675', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11675'}, {'name': 'subversion-date-parsing-command-execution(16191)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16191'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/082004.html'}, {'name': '11642', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11642'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0397?


Explain the CVE ID: What does the identifier CVE-2004-0398 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0398.

Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client.


Provide references for further information: Can you share references or external links related to CVE-2004-0398?

{'name': '11638', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11638'}, {'name': '11673', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11673'}, {'name': '6302', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6302'}, {'name': '20040519 Advisory 06/2004: libneon date parsing vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0982.html'}, {'name': '11650', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11650'}, {'name': '20040519 [OpenPKG-SA-2004.024] OpenPKG Security Advisory (neon)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108500057108022&w=2'}, {'name': 'GLSA-200405-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-13.xml'}, {'name': 'O-148', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-148.shtml'}, {'name': 'GLSA-200405-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-15.xml'}, {'name': 'MDKSA-2004:049', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:049'}, {'name': '10385', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10385'}, {'name': 'DSA-506', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-506'}, {'name': 'FEDORA-2004-1552', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=1552'}, {'name': 'neon-library-nerfc1036parse-bo(16192)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16192'}, {'name': 'DSA-507', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-507'}, {'name': 'CLA-2004:841', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000841'}, {'name': '20040519 Advisory 06/2004: libneon date parsing vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108498433632333&w=2'}, {'name': 'RHSA-2004:191', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-191.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0398?


Explain the CVE ID: What does the identifier CVE-2004-0399 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0399.

Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.


Provide references for further information: Can you share references or external links related to CVE-2004-0399?

{'name': 'DSA-502', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-502'}, {'name': 'DSA-501', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-501'}, {'name': '20040506 Buffer overflows in exim, yet still exim much better than windows', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021015.html'}, {'name': '11558', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11558'}, {'name': 'exim-requireverify-bo(16079)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16079'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guninski.com/exim1.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0399?


Explain the CVE ID: What does the identifier CVE-2004-0400 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0400.

Stack-based buffer overflow in Exim 4 before 4.33, when the headers_check_syntax option is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code during the header check.


Provide references for further information: Can you share references or external links related to CVE-2004-0400?

{'name': 'DSA-502', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-502'}, {'name': 'DSA-501', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-501'}, {'name': '20040506 Buffer overflows in exim, yet still exim much better than windows', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021015.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guninski.com/exim1.html'}, {'name': 'exim-headerschecksyntax-bo(16077)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16077'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0400?


Explain the CVE ID: What does the identifier CVE-2004-0401 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0401.

Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions.


Provide references for further information: Can you share references or external links related to CVE-2004-0401?

{'name': '15126', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15126'}, {'name': '1010159', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010159'}, {'name': 'libtasn1-der-parsing(16157)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16157'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.backports.org/changelog.html'}, {'name': '10360', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10360'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://packages.debian.org/changelogs/pool/main/libt/libtasn1-2/libtasn1-2_0.2.13-1/changelog'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0401?


Explain the CVE ID: What does the identifier CVE-2004-0402 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0402.

Buffer overflow in xpcd-svga in xpcd before 2.08, and possibly other versions, may allow local users to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0402?

{'name': 'xpcd-svga-pcdopen-bo(16236)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16236'}, {'name': 'DSA-508', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-508'}, {'name': '10403', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10403'}, {'name': 'MDKSA-2004:053', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:053'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0402?


Explain the CVE ID: What does the identifier CVE-2004-0403 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0403.

Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field.


Provide references for further information: Can you share references or external links related to CVE-2004-0403?

{'name': 'MDKSA-2004:069', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:069'}, {'name': 'oval:org.mitre.oval:def:984', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A984'}, {'name': '1009937', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009937'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vuxml.org/freebsd/ccd698df-8e20-11d8-90d1-0020ed76ef5a.html'}, {'name': '20040506-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040506-01-U.asc'}, {'name': 'racoon-isakmp-dos(15893)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15893'}, {'name': 'oval:org.mitre.oval:def:11220', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11220'}, {'name': 'APPLE-SA-2004-05-03', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://marc.info/?l=bugtraq&m=108369640424244&w=2'}, {'name': '11877', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11877'}, {'name': 'SCOSA-2005.10', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt'}, {'name': '10172', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10172'}, {'name': '11410', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11410'}, {'name': 'GLSA-200404-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200404-17.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=232288'}, {'name': '5491', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5491'}, {'name': 'RHSA-2004:165', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-165.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kame.net/dev/cvsweb2.cgi/kame/kame/kame/racoon/isakmp.c.diff?r1=1.180&r2=1.181'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0403?


Explain the CVE ID: What does the identifier CVE-2004-0404 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0404.

logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp.


Provide references for further information: Can you share references or external links related to CVE-2004-0404?

{'name': 'MDKSA-2004:155', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:155'}, {'name': '11399', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11399'}, {'name': 'logcheck-directory-symlink(15888)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15888'}, {'name': 'DSA-488', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-488'}, {'name': '10162', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10162'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0404?


Explain the CVE ID: What does the identifier CVE-2004-0405 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0405.

CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180.


Provide references for further information: Can you share references or external links related to CVE-2004-0405?

{'name': 'oval:org.mitre.oval:def:1060', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1060'}, {'name': 'cvs-dotdot-directory-traversal(15891)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15891'}, {'name': 'DSA-486', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-486'}, {'name': 'SSA:2004-108-02', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.400181'}, {'name': '20040404-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc'}, {'name': 'FreeBSD-SA-04:07', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:07.cvs.asc'}, {'name': 'GLSA-200404-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200404-13.xml'}, {'name': 'oval:org.mitre.oval:def:10818', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10818'}, {'name': 'FEDORA-2004-1620', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=108636445031613&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0405?


Explain the CVE ID: What does the identifier CVE-2004-0406 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0406.


Provide references for further information: Can you share references or external links related to CVE-2004-0406?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0406?


Explain the CVE ID: What does the identifier CVE-2004-0407 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0407.

The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish.


Provide references for further information: Can you share references or external links related to CVE-2004-0407?

{'name': '10158', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10158'}, {'name': '1009825', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009825'}, {'name': '11392', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11392'}, {'name': 'coldfusion-upload-file-dos(15882)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15882'}, {'name': '5402', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5402'}, {'name': '20040416 [securityzone@macromedia.com: New Macromedia Security Zone Bulletin Posted]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108213782629001&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/devnet/security/security_zone/mpsb04-06.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0407?


Explain the CVE ID: What does the identifier CVE-2004-0408 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0408.

Buffer overflow in the child_service function in the ident2 ident daemon allows remote attackers to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0408?

{'name': 'ident2-childservice-bo(15938)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15938'}, {'name': '10192', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10192'}, {'name': 'DSA-494', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-494'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0408?


Explain the CVE ID: What does the identifier CVE-2004-0409 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0409.

Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0409?

{'name': 'RHSA-2004:177', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-177.html'}, {'name': 'DSA-493', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2004/dsa-493'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xchat.org/'}, {'name': 'RHSA-2004:585', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-585.html'}, {'name': 'GLSA-200404-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200404-15.xml'}, {'name': 'FLSA:123013', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_123013'}, {'name': 'oval:org.mitre.oval:def:11312', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11312'}, {'name': '[xchat-announce] 20040405 xchat 2.0.x Socks5 Vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail.nl.linux.org/xchat-announce/2004-04/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0409?


Explain the CVE ID: What does the identifier CVE-2004-0410 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0410.


Provide references for further information: Can you share references or external links related to CVE-2004-0410?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0410?


Explain the CVE ID: What does the identifier CVE-2004-0411 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0411.

The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which allows remote attackers to manipulate the options that are passed to the associated programs, possibly to read arbitrary files or execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0411?

{'name': 'RHSA-2004:222', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-222.html'}, {'name': 'SuSE-SA:2003:014', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_14_kdelibs.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20040517-1.txt'}, {'name': 'kde-url-handler-gain-access(16163)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16163'}, {'name': 'FEDORA-2004-121', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/advisories/6717'}, {'name': '20040513 Opera Telnet URI Handler Vulnerability also applies to other browsers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/363225'}, {'name': 'DSA-518', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-518'}, {'name': 'FEDORA-2004-122', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/advisories/6743'}, {'name': '6107', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6107'}, {'name': '20040517 KDE Security Advisory: URI Handler Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108481412427344&w=2'}, {'name': '11602', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11602'}, {'name': 'CLA-2004:843', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000843'}, {'name': 'SSA:2004-238', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.362635'}, {'name': 'GLSA-200405-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-11.xml'}, {'name': 'oval:org.mitre.oval:def:954', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A954'}, {'name': '10358', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10358'}, {'name': 'O-146', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-146.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0411?


Explain the CVE ID: What does the identifier CVE-2004-0412 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0412.

Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server.


Provide references for further information: Can you share references or external links related to CVE-2004-0412?

{'name': '10412', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10412'}, {'name': 'GLSA-200406-04', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200406-04.xml'}, {'name': '11701', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11701'}, {'name': 'mailman-obtain-password(16256)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16256'}, {'name': 'MDKSA-2004:051', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:051'}, {'name': 'FEDORA-2004-1734', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=109034869927955&w=2'}, {'name': 'CLA-2004:842', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=123559'}, {'name': '[Mailman-Announce] 20040515 RELEASED Mailman 2.1.5', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail.python.org/pipermail/mailman-announce/2004-May/000072.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0412?


Explain the CVE ID: What does the identifier CVE-2004-0413 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0413.

libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL strings, which allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via an integer overflow that leads to a heap-based buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2004-0413?

{'name': '10519', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10519'}, {'name': 'FLSA:1748', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=1748'}, {'name': 'SuSE-SA:2004:018', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_18_subversion.html'}, {'name': 'FEDORA-2004-165', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/advisories/6847'}, {'name': 'GLSA-200406-07', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200406-07.xml'}, {'name': 'subversion-svn-bo(16396)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16396'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://subversion.tigris.org/security/CAN-2004-0413-advisory.txt'}, {'name': '20041012 [FMADV] Subversion <= 1.04 Heap Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/365836'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0413?


Explain the CVE ID: What does the identifier CVE-2004-0414 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0414.

CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution.


Provide references for further information: Can you share references or external links related to CVE-2004-0414?

{'name': 'oval:org.mitre.oval:def:10575', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10575'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/092004.html'}, {'name': '20040605-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc'}, {'name': 'DSA-517', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-517'}, {'name': 'oval:org.mitre.oval:def:993', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A993'}, {'name': '20040611 [OpenPKG-SA-2004.027] OpenPKG Security Advisory (cvs)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108716553923643&w=2'}, {'name': 'RHSA-2004:233', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-233.html'}, {'name': 'MDKSA-2004:058', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:058'}, {'name': 'GLSA-200406-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200406-06.xml'}, {'name': '20040604-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc'}, {'name': '20040609 Advisory 09/2004: More CVS remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0414?


Explain the CVE ID: What does the identifier CVE-2004-0415 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0415.

Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portions of kernel memory.


Provide references for further information: Can you share references or external links related to CVE-2004-0415?

{'name': 'RHSA-2004:413', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-413.html'}, {'name': 'RHSA-2004:418', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-418.html'}, {'name': 'GLSA-200408-24', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml'}, {'name': 'oval:org.mitre.oval:def:9965', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9965'}, {'name': 'CLA-2004:879', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000879'}, {'name': 'linux-pointer-info-disclosure(16877)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16877'}, {'name': 'MDKSA-2004:087', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:087'}, {'name': '20040804-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0415?


Explain the CVE ID: What does the identifier CVE-2004-0416 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0416.

Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0416?

{'name': 'DSA-519', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-519'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/092004.html'}, {'name': '20040605-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc'}, {'name': '20040611 [OpenPKG-SA-2004.027] OpenPKG Security Advisory (cvs)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108716553923643&w=2'}, {'name': 'oval:org.mitre.oval:def:10070', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10070'}, {'name': 'RHSA-2004:233', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-233.html'}, {'name': 'MDKSA-2004:058', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:058'}, {'name': 'GLSA-200406-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200406-06.xml'}, {'name': '20040604-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc'}, {'name': 'oval:org.mitre.oval:def:994', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A994'}, {'name': '20040609 Advisory 09/2004: More CVS remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0416?


Explain the CVE ID: What does the identifier CVE-2004-0417 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0417.

Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.


Provide references for further information: Can you share references or external links related to CVE-2004-0417?

{'name': 'oval:org.mitre.oval:def:11145', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11145'}, {'name': 'DSA-519', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-519'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/092004.html'}, {'name': '20040605-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc'}, {'name': '20040611 [OpenPKG-SA-2004.027] OpenPKG Security Advisory (cvs)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108716553923643&w=2'}, {'name': 'RHSA-2004:233', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-233.html'}, {'name': 'MDKSA-2004:058', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:058'}, {'name': 'GLSA-200406-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200406-06.xml'}, {'name': 'oval:org.mitre.oval:def:1001', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1001'}, {'name': '20040609 Advisory 09/2004: More CVS remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0417?


Explain the CVE ID: What does the identifier CVE-2004-0418 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0418.

serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data.