Provide references for further information: Can you share references or external links related to CVE-2004-1443?

{'name': '10845', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10845'}, {'name': 'imp-html-viewer-xss(16866)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16866'}, {'name': '12202', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12202/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.horde.org/diff.php/imp/docs/CHANGES?r1=1.389.2.106&r2=1.389.2.109&ty=h'}, {'name': 'GLSA-200408-07', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-07.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1443?


Explain the CVE ID: What does the identifier CVE-2004-1444 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1444.

Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via .. (dot dot) sequences in an @@ command in an HTTP GET request.


Provide references for further information: Can you share references or external links related to CVE-2004-1444?

{'name': '1010415', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010415'}, {'name': '10495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10495'}, {'name': 'roundup-get-view-file(16350)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16350'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/tracker/index.php?func=detail&aid=961511&group_id=31577&atid=402788'}, {'name': '11801', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11801/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.nl/0406-exploits/roundUP.txt'}, {'name': 'GLSA-200408-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-09.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1444?


Explain the CVE ID: What does the identifier CVE-2004-1445 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1445.

A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2004-1445?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.nessus.org/nessus_2_0.html'}, {'name': 'nessus-adduser-race-condition(16768)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16768'}, {'name': '12127', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12127/'}, {'name': 'GLSA-200408-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-11.xml'}, {'name': '10784', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10784'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1445?


Explain the CVE ID: What does the identifier CVE-2004-1446 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1446.

Unknown vulnerability in ScreenOS in Juniper Networks NetScreen firewall 3.x through 5.x allows remote attackers to cause a denial of service (device reboot or hang) via a crafted SSH v1 packet.


Provide references for further information: Can you share references or external links related to CVE-2004-1446?

{'name': 'VU#749870', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/749870'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.juniper.net/support/security/alerts/screenos-sshv1-2.txt'}, {'name': '10854', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10854'}, {'name': 'netscreen-screenos-sshv1-dos(16876)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16876'}, {'name': '12208', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12208/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1446?


Explain the CVE ID: What does the identifier CVE-2004-1447 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1447.

Jetbox One 2.0.8 and possibly other versions stores passwords in the database in plaintext, which could allow attackers to gain sensitive information.


Provide references for further information: Can you share references or external links related to CVE-2004-1447?

{'tags': ['x_refsource_MISC'], 'url': 'http://echo.or.id/adv/adv03-y3dips-2004.txt'}, {'name': 'VU#586720', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/586720'}, {'name': 'jetbox-one-plaintext-password(16898)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16898'}, {'name': '8325', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8325'}, {'name': '10858', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10858'}, {'name': '20040804 vulnerabilities in JetboxOne CMS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/370852'}, {'name': '12230', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12230'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1447?


Explain the CVE ID: What does the identifier CVE-2004-1448 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1448.

Jetbox One 2.0.8 and possibly other versions allow remote attackers with Author privileges in the IMAGES module to upload PHP files and execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-1448?

{'name': '12230', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12230/'}, {'name': '10859', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10859'}, {'tags': ['x_refsource_MISC'], 'url': 'http://echo.or.id/adv/adv03-y3dips-2004.txt'}, {'name': 'jetbox-one-file-upload(16900)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16900'}, {'name': 'VU#417408', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/417408'}, {'name': '20040804 vulnerabilities in JetboxOne CMS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/370852'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1448?


Explain the CVE ID: What does the identifier CVE-2004-1449 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1449.

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of files on a user's hard drive by obscuring a file upload control and tricking the user into dragging text into that control.


Provide references for further information: Can you share references or external links related to CVE-2004-1449?

{'name': 'MDKSA-2004:082', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:082'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=206859#c0'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1449?


Explain the CVE ID: What does the identifier CVE-2004-1450 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1450.

Unknown vulnerability in LiveConnect in Mozilla 1.7 beta allows remote attackers to read arbitrary files in known locations.


Provide references for further information: Can you share references or external links related to CVE-2004-1450?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=239122'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1450?


Explain the CVE ID: What does the identifier CVE-2004-1451 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1451.

Mozilla before 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote attackers to trick users into clicking on unknown or untrusted sites and facilitate phishing attacks.


Provide references for further information: Can you share references or external links related to CVE-2004-1451?

{'name': '10419', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10419/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=228176'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1451?


Explain the CVE ID: What does the identifier CVE-2004-1452 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1452.

Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts.


Provide references for further information: Can you share references or external links related to CVE-2004-1452?

{'name': '10951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10951'}, {'name': 'gentoo-tomcat-gain-privileges(16993)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16993'}, {'name': 'GLSA-200408-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-15.xml'}, {'name': '12296', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12296/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1452?


Explain the CVE ID: What does the identifier CVE-2004-1453 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1453.

GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program.


Provide references for further information: Can you share references or external links related to CVE-2004-1453?

{'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=59526'}, {'name': 'GLSA-200408-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-16.xml'}, {'name': 'RHSA-2005:261', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-261.html'}, {'name': 'RHSA-2005:256', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-256.html'}, {'name': '12306', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12306'}, {'name': 'oval:org.mitre.oval:def:10762', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10762'}, {'name': 'glibc-suid-info-disclosure(17006)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17006'}, {'name': '10963', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10963'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1453?


Explain the CVE ID: What does the identifier CVE-2004-1454 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1454.

Cisco IOS 12.0S, 12.2, and 12.3, with Open Shortest Path First (OSPF) enabled, allows remote attackers to cause a denial of service (device reload) via a malformed OSPF packet.


Provide references for further information: Can you share references or external links related to CVE-2004-1454?

{'name': 'O-199', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-199.shtml'}, {'name': '20040818 Cisco IOS Malformed OSPF Packet Causes Reload', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040818-ospf.shtml'}, {'name': 'VU#989406', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/989406'}, {'name': 'cisco-ios-ospf-dos(17033)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17033'}, {'name': '12322', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12322'}, {'name': '10971', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10971'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1454?


Explain the CVE ID: What does the identifier CVE-2004-1455 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1455.

Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL.


Provide references for further information: Can you share references or external links related to CVE-2004-1455?

{'name': '12194', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12194/'}, {'name': '20040817 Open Security Group Advisory #6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109284737628045&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://open-security.org/advisories/6'}, {'name': '10890', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10890'}, {'name': 'xine-vcd-identifier-bo(16930)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16930'}, {'name': 'GLSA-200408-18', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-18.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1455?


Explain the CVE ID: What does the identifier CVE-2004-1456 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1456.

filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.


Provide references for further information: Can you share references or external links related to CVE-2004-1456?

{'name': '10878', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10878'}, {'name': 'VU#770816', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/770816'}, {'name': '8373', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8373'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cvstrac.org/cvstrac/chngview?cn=316'}, {'name': 'cvstrac-command-execute(16929)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16929'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cvstrac.org/cvstrac/tktview?tn=339'}, {'name': '20040805 CVStrac Remote Arbitrary Code Execution exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109173359428253&w=2'}, {'name': '12090', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12090/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1456?


Explain the CVE ID: What does the identifier CVE-2004-1457 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1457.

The Virtual Private Network (VPN) capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of service (ABEND in IKE.NLM) via a malformed IKE packet, as sent by the Striker ISAKMP Protocol Test Suite.


Provide references for further information: Can you share references or external links related to CVE-2004-1457?

{'name': '12067', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12067/'}, {'name': 'novell-bordermanger-ikenlm-dos(16697)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16697'}, {'name': 'VU#432097', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/432097'}, {'name': '10727', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10727'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/10093576.htm'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1457?


Explain the CVE ID: What does the identifier CVE-2004-1458 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1458.

The CSAdmin web administration interface for Cisco Secure Access Control Server (ACS) 3.2(2) build 15 allows remote attackers to cause a denial of service (hang) via a flood of TCP connections to port 2002.


Provide references for further information: Can you share references or external links related to CVE-2004-1458?

{'name': 'ciscosecure-csadmin-tcp-dos(17114)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17114'}, {'name': '9182', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/9182'}, {'name': '12386', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12386/'}, {'name': 'O-203', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-203.shtml'}, {'name': '11047', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11047'}, {'name': '20040825 Multiple Vulnerabilities in Cisco Secure Access Control Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1458?


Explain the CVE ID: What does the identifier CVE-2004-1459 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1459.

Cisco Secure Access Control Server (ACS) 3.2, when configured as a Light Extensible Authentication Protocol (LEAP) RADIUS proxy, allows remote attackers to cause a denial of service (device crash) via certain LEAP authentication requests.


Provide references for further information: Can you share references or external links related to CVE-2004-1459?

{'name': '11047', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11047'}, {'name': 'ciscosecure-leap-radius-dos(17116)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17116'}, {'name': '20040825 Multiple Vulnerabilities in Cisco Secure Access Control Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1459?


Explain the CVE ID: What does the identifier CVE-2004-1460 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1460.

Cisco Secure Access Control Server (ACS) 3.2(3) and earlier, when configured with an anonymous bind in Novell Directory Services (NDS) and authenticating NDS users with NDS, allows remote attackers to gain unauthorized access to AAA clients via a blank password.


Provide references for further information: Can you share references or external links related to CVE-2004-1460?

{'name': '11047', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11047'}, {'name': 'ciscosecure-nds-blank-authentication(17117)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17117'}, {'name': '20040825 Multiple Vulnerabilities in Cisco Secure Access Control Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1460?


Explain the CVE ID: What does the identifier CVE-2004-1461 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1461.

Cisco Secure Access Control Server (ACS) 3.2(3) and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers to bypass authentication by connecting to that port from the same IP address.


Provide references for further information: Can you share references or external links related to CVE-2004-1461?

{'name': 'ciscosecure-csadmin-auth-bypass(17118)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17118'}, {'name': '11047', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11047'}, {'name': '20040825 Multiple Vulnerabilities in Cisco Secure Access Control Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1461?


Explain the CVE ID: What does the identifier CVE-2004-1462 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1462.

Unknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized access to administrator functions such as (1) revert and (2) delete.


Provide references for further information: Can you share references or external links related to CVE-2004-1462?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://sourceforge.net/project/shownotes.php?group_id=8482&release_id=254801'}, {'name': 'moinmoin-acl-gain-privileges(16833)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16833'}, {'name': 'GLSA-200408-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-25.xml'}, {'name': '10805', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10805'}, {'name': '8194', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/displayvuln.php?osvdb_id=8194'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1462?


Explain the CVE ID: What does the identifier CVE-2004-1463 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1463.

Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact.


Provide references for further information: Can you share references or external links related to CVE-2004-1463?

{'name': '8195', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/displayvuln.php?osvdb_id=8195'}, {'name': '10801', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10801'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?group_id=8482&release_id=254801'}, {'name': 'GLSA-200408-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200408-25.xml'}, {'name': 'moinmoin-pageeditor-gain-privilege(16832)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16832'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1463?


Explain the CVE ID: What does the identifier CVE-2004-1464 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1464.

Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.


Provide references for further information: Can you share references or external links related to CVE-2004-1464?

{'name': 'cisco-ios-telnet-dos(17131)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17131'}, {'name': '1011079', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011079'}, {'name': 'VU#384230', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/384230'}, {'name': '12395', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12395/'}, {'name': '20040827 Cisco Telnet Denial of Service Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml'}, {'name': '11060', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11060'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1464?


Explain the CVE ID: What does the identifier CVE-2004-1465 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1465.

Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line.


Provide references for further information: Can you share references or external links related to CVE-2004-1465?

{'name': '20040901 WinZip Unspecified Buffer Overflows May Let Remote or Local Users Execute Arbitrary Code', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109416099301369&w=2'}, {'name': 'winzip-command-line-bo(17197)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17197'}, {'name': '11092', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11092'}, {'name': 'winzip-code-execution(17192)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17192'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.winzip.com/wz90sr1.htm'}, {'name': '1011132', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011132'}, {'name': 'O-211', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-211.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1465?


Explain the CVE ID: What does the identifier CVE-2004-1466 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1466.

The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 seconds after they have been uploaded using save_photos.php, which allows remote attackers to upload and execute execute arbitrary scripts before they are deleted, if the temporary directory is under the web root.


Provide references for further information: Can you share references or external links related to CVE-2004-1466?

{'name': '10968', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10968'}, {'name': 'gallery-savephotos-file-upload(17021)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17021'}, {'name': '20040817 Gallery 1.4.4 save_photos.php PHP Insertion Proof of Concept', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0757.html'}, {'name': 'GLSA-200409-05', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-05.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=134&mode=thread&order=0&thold=0'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1466?


Explain the CVE ID: What does the identifier CVE-2004-1467 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1467.

Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.0.00.003 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) date or search text field in the calendar module, (2) Field parameter, Filter parameter, QField parameter, Start parameter or Search field in the address module, (3) Subject field in the message module or (4) Subject field in the Ticket module.


Provide references for further information: Can you share references or external links related to CVE-2004-1467?

{'name': 'GLSA-200409-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-06.xml'}, {'name': '11013', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11013'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/forum/forum.php?forum_id=401807'}, {'name': '20040822 Multiple Cross Site Scripting Vulnerabilities in eGroupWare', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/372603'}, {'name': 'egroupware-mult-modules-xss(17078)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17078'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1467?


Explain the CVE ID: What does the identifier CVE-2004-1468 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1468.

The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message.


Provide references for further information: Can you share references or external links related to CVE-2004-1468?

{'name': '11122', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11122'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/77_e.html'}, {'name': '12488', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12488/'}, {'name': 'GLSA-200409-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-15.xml'}, {'name': 'usermin-web-mail-command-execution(17293)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17293'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1468?


Explain the CVE ID: What does the identifier CVE-2004-1469 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1469.

Format string vulnerability in the log function in SUS 2.0.2, and other versions before 2.0.6, allows local users to execute arbitrary code via format string specifiers in a command line argument that is passed directly to syslog.


Provide references for further information: Can you share references or external links related to CVE-2004-1469?

{'tags': ['x_refsource_MISC'], 'url': 'http://security.lss.hr/index.php?page=details&ID=LSS-2004-09-01'}, {'name': 'GLSA-200409-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-17.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://pdg.uow.edu.au/sus/CHANGES'}, {'name': '20040914 SUS 2.0.2 local root vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109517782910407&w=2'}, {'name': '11176', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11176'}, {'name': 'sus-log-format-string(17361)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17361'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1469?


Explain the CVE ID: What does the identifier CVE-2004-1470 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1470.

CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server.


Provide references for further information: Can you share references or external links related to CVE-2004-1470?

{'name': 'snipsnap-response-splitting(17364)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17364'}, {'name': '11180', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11180'}, {'name': 'GLSA-200409-23', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-23.xml'}, {'name': '20040914 ADVISORY: http response splitting in snipsnap', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109518773223511&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.snipsnap.org/space/start'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1470?


Explain the CVE ID: What does the identifier CVE-2004-1471 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1471.

Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.


Provide references for further information: Can you share references or external links related to CVE-2004-1471?

{'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/092004.html'}, {'name': '10499', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10499'}, {'name': 'FreeBSD-SA-04:14', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:14.cvs.asc'}, {'name': 'cvs-wrapper-format-string(16365)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16365'}, {'name': '20040609 Advisory 09/2004: More CVS remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1471?


Explain the CVE ID: What does the identifier CVE-2004-1472 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1472.

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service (device freeze) via a fast UDP port scan on the WAN interface.


Provide references for further information: Can you share references or external links related to CVE-2004-1472?

{'name': '12635', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12635'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html'}, {'name': '20040922 Multiple Vulnerabilities in Symantec Enterprise Firewall/Gateway Security Products', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109588376426070&w=2'}, {'name': 'symantec-firewallvpn-udp-dos(17469)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17469'}, {'name': 'VU#441078', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/441078'}, {'name': '11237', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11237'}, {'name': '10204', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10204'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1472?


Explain the CVE ID: What does the identifier CVE-2004-1473 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1473.

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.


Provide references for further information: Can you share references or external links related to CVE-2004-1473?

{'name': 'symantec-udp-obtain-info(17470)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17470'}, {'name': '12635', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12635'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html'}, {'name': '20040922 Multiple Vulnerabilities in Symantec Enterprise Firewall/Gateway Security Products', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109588376426070&w=2'}, {'name': '11237', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11237'}, {'name': '10205', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10205'}, {'name': 'VU#329230', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/329230'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1473?


Explain the CVE ID: What does the identifier CVE-2004-1474 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1474.

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.


Provide references for further information: Can you share references or external links related to CVE-2004-1474?

{'name': '12635', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12635'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html'}, {'name': 'VU#173910', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/173910'}, {'name': '20040922 Multiple Vulnerabilities in Symantec Enterprise Firewall/Gateway Security Products', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109588376426070&w=2'}, {'name': '10206', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10206'}, {'name': 'symantec-default-snmp(17471)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17471'}, {'name': '11237', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11237'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1474?


Explain the CVE ID: What does the identifier CVE-2004-1475 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1475.

Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1) long VideoCD vcd:// MRLs or (2) long subtitle lines.


Provide references for further information: Can you share references or external links related to CVE-2004-1475?

{'name': '11206', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11206'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xinehq.de/index.php/security/XSA-2004-4'}, {'name': '20040907 XSA-2004-4: multiple string overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/375485/2004-09-02/2004-09-08/0'}, {'name': 'xine-subtitle-bo(17432)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17432'}, {'name': 'GLSA-200408-18', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200408-18.xml'}, {'name': 'xine-videocd-mrl-bo(17430)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17430'}, {'name': 'GLSA-200409-30', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-30.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1475?


Explain the CVE ID: What does the identifier CVE-2004-1476 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1476.

Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label.


Provide references for further information: Can you share references or external links related to CVE-2004-1476?

{'name': '11206', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11206'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xinehq.de/index.php/security/XSA-2004-4'}, {'name': '20040907 XSA-2004-4: multiple string overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/375485/2004-09-02/2004-09-08/0'}, {'name': 'GLSA-200409-30', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200409-30.xml'}, {'name': 'xine-videocd-disk-bo(17431)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17431'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1476?


Explain the CVE ID: What does the identifier CVE-2004-1477 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1477.

Cross-site scripting (XSS) vulnerability in the Management Console in JRun 4.0 allows remote attackers to execute arbitrary web script or HTML and possibly hijack a user's session.


Provide references for further information: Can you share references or external links related to CVE-2004-1477?

{'name': 'VU#668206', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/668206'}, {'name': '20040923 New Macromedia Security Zone Bulletins Posted', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109621995623823&w=2'}, {'name': 'jrun-management-console-xss(17483)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17483'}, {'name': '11245', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11245'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html'}, {'name': '12638', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12638/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1477?


Explain the CVE ID: What does the identifier CVE-2004-1478 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1478.

JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user's HTTP session.


Provide references for further information: Can you share references or external links related to CVE-2004-1478?

{'name': 'jrun-jsessionid-hijack(17481)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17481'}, {'name': '20040923 New Macromedia Security Zone Bulletins Posted', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109621995623823&w=2'}, {'name': '11245', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11245'}, {'name': 'VU#584958', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/584958'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html'}, {'name': '12638', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12638/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1478?


Explain the CVE ID: What does the identifier CVE-2004-1479 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1479.


Provide references for further information: Can you share references or external links related to CVE-2004-1479?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1479?


Explain the CVE ID: What does the identifier CVE-2004-1480 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1480.

Unknown vulnerability in the management station in HP StorageWorks Command View XP 1.8B and earlier allows remote attackers to bypass access restrictions.


Provide references for further information: Can you share references or external links related to CVE-2004-1480?

{'name': 'SSRT4794', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBST01071'}, {'name': '1011407', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011407'}, {'name': '11249', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11249'}, {'name': 'hp-storageworks-restriction-bypass(17490)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17490'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1480?


Explain the CVE ID: What does the identifier CVE-2004-1481 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1481.

Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2004-1481?

{'name': '11309', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11309'}, {'name': '20041001 EEYE: RealPlayer pnen3260.dll Heap Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=109708374115061&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.service.real.com/help/faq/security/040928_player/EN/'}, {'name': '12672', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12672'}, {'name': 'realplayer-rm-code-execution(17549)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17549'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1481?


Explain the CVE ID: What does the identifier CVE-2004-1482 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1482.

The sbuf_getmsg function in BNC incorrectly handles backspace characters, which could allow remote attackers to bypass authentication and gain access to arbitrary scripts.


Provide references for further information: Can you share references or external links related to CVE-2004-1482?

{'name': '11355', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11355'}, {'name': '12770', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12770/'}, {'name': 'GLSA-200410-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200410-13.xml'}, {'name': 'bnc-backspace-command-execution(17672)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17672'}, {'name': '10596', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10596'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.gotbnc.com/changes.html#2.8.9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1482?


Explain the CVE ID: What does the identifier CVE-2004-1483 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1483.

Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series 5.0 have unknown attack vectors and unknown impact.


Provide references for further information: Can you share references or external links related to CVE-2004-1483?

{'name': '10903', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10903'}, {'name': 'VU#760256', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/760256'}, {'name': '8508', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8508'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.symantec.com/public/english_us_canada/products/sym_clientless_vpn/sym_clientless_vpn_5/updates/hf3-readme.txt'}, {'name': 'symantec-clientless-file-browsers(16933)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16933'}, {'name': '12254', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12254/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1483?


Explain the CVE ID: What does the identifier CVE-2004-1484 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1484.

Format string vulnerability in the _msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy client and run with the -ly option, allows remote attackers or local users to execute arbitrary code via format string specifiers in a syslog message.


Provide references for further information: Can you share references or external links related to CVE-2004-1484?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.nosystem.com.ar/advisories/advisory-07.txt'}, {'name': '12936', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12936/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.dest-unreach.org/socat/advisory/socat-adv-1.html'}, {'name': '11505', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11505'}, {'name': 'socat-format-string(17822)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17822'}, {'name': 'GLSA-200410-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200410-26.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1484?


Explain the CVE ID: What does the identifier CVE-2004-1485 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1485.

Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function.


Provide references for further information: Can you share references or external links related to CVE-2004-1485?

{'name': '11527', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11527'}, {'name': '20041026 inetutils tftp client, DNS resolving bofs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109882085912915&w=2'}, {'name': 'inetutils-tftp-dns-bo(17878)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17878'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1485?


Explain the CVE ID: What does the identifier CVE-2004-1486 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1486.

Unknown vulnerability in Serviceguard A.11.13 through A.11.16.00 and Cluster Object Manager A.01.03 and B.01.04 through B.03.00.01 on HP-UX, Serviceguard A.11.14.04 and A.11.15.04 and Cluster Object Manager B.02.01.02 and B.02.02.02 on HP Linux, allow remote attackers to gain privileges via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2004-1486?

{'name': '11507', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11507'}, {'name': '12946', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12946'}, {'name': 'hp-cluster-serviceguard-gain-privileges(17867)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17867'}, {'name': 'SSRT3526', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=109893515704267&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1486?


Explain the CVE ID: What does the identifier CVE-2004-1487 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1487.

wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences.


Provide references for further information: Can you share references or external links related to CVE-2004-1487?

{'name': 'RHSA-2005:771', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-771.html'}, {'name': '11871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11871'}, {'name': '20041209 wget: Arbitrary file overwriting/appending/creating and other vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110269474112384&w=2'}, {'name': 'USN-145-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/145-1/'}, {'name': 'wget-file-overwrite(18420)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18420'}, {'name': 'oval:org.mitre.oval:def:11682', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11682'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755'}, {'name': '1012472', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012472'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1487?


Explain the CVE ID: What does the identifier CVE-2004-1488 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1488.

wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-1488?

{'name': 'RHSA-2005:771', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-771.html'}, {'name': '11871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11871'}, {'name': '20041209 wget: Arbitrary file overwriting/appending/creating and other vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110269474112384&w=2'}, {'name': 'USN-145-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/145-1/'}, {'name': 'SUSE-SR:2006:016', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_16_sr.html'}, {'name': 'wget-terminal-overwrite(18421)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18421'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755'}, {'name': 'oval:org.mitre.oval:def:9750', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9750'}, {'name': '20960', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20960'}, {'name': '1012472', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012472'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1488?


Explain the CVE ID: What does the identifier CVE-2004-1489 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1489.

Opera 7.54 and earlier does not properly limit an applet's access to internal Java packages from Sun, which allows remote attackers to gain sensitive information, such as user names and the installation directory.


Provide references for further information: Can you share references or external links related to CVE-2004-1489?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.opera.com/linux/changelogs/754u1/'}, {'name': '20041119 Java Vulnerabilities in Opera 7.54', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029044.html'}, {'name': 'GLSA-200502-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1489?


Explain the CVE ID: What does the identifier CVE-2004-1490 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1490.

Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spaces (ASCII character code 160) in the (1) Content-Disposition or (2) Content-Type headers.


Provide references for further information: Can you share references or external links related to CVE-2004-1490?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.opera.com/linux/changelogs/754u1/'}, {'name': '11883', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11883'}, {'name': '12981', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12981'}, {'name': 'opera-file-type-spoofing(18423)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18423'}, {'name': 'GLSA-200502-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2004-19/advisory/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1490?


Explain the CVE ID: What does the identifier CVE-2004-1491 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1491.

Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a shortcut or launcher that contains an Exec entry.


Provide references for further information: Can you share references or external links related to CVE-2004-1491?

{'name': 'SUSE-SR:2005:008', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archive/suse-security-announce/2005-Mar/0007.html'}, {'name': '11901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11901'}, {'name': 'pera-kfmclient-command-execution(18457)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18457'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zone-h.org/advisories/read/id=6503'}, {'name': 'GLSA-200502-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml'}, {'name': '13447', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13447/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.opera.com/linux/changelogs/754u2/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1491?


Explain the CVE ID: What does the identifier CVE-2004-1492 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1492.

Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (game exit) via a data packet that contains a large size specifier, which causes a large memory allocation to fail.


Provide references for further information: Can you share references or external links related to CVE-2004-1492?

{'name': '20041027 Crashs in Master of Orion III 1.2.5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109889705116038&w=2'}, {'name': '11550', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11550'}, {'name': '13008', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13008'}, {'name': 'master-of-orion-size-dos(17908)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17908'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1492?


Explain the CVE ID: What does the identifier CVE-2004-1493 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1493.

Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (server crash) via multiple connections with long nicknames, possibly triggering a buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2004-1493?

{'name': '20041027 Crashs in Master of Orion III 1.2.5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109889705116038&w=2'}, {'name': '11550', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11550'}, {'name': '13008', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13008'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.nl/0410-advisories/masterOrionIII.txt'}, {'name': 'master-of-orion-nickname-dos(17884)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17884'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1493?


Explain the CVE ID: What does the identifier CVE-2004-1494 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1494.

Buffer overflow in the Screen Fetch option in XDICT 2002 through 2005 allows remote attackers to cause a denial of service ( CPU consumption or application exit) and possibly execute arbitrary code via a long string.


Provide references for further information: Can you share references or external links related to CVE-2004-1494?

{'name': 'xdict-screen-fetch-bo(17929)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17929'}, {'name': '20041101 XDICT Buffer OverRun Vulnerability,funny :-)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109933696831725&w=2'}, {'name': '20041101 XDICT Buffer OverRun Vulnerability,funny :-)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028241.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secway.org/Advisory/Ad20041026EN.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1494?


Explain the CVE ID: What does the identifier CVE-2004-1495 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1495.

The Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service (application crash) via a corrupt ZIP archive.


Provide references for further information: Can you share references or external links related to CVE-2004-1495?

{'name': '20041102 Medium Risk Vulnerability in WinRAR', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109941351432699&w=2'}, {'name': '13070', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13070'}, {'name': 'winrar-repair-archive(17937)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17937'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.rarlabs.com/rarnew.htm'}, {'name': '11581', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11581'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1495?


Explain the CVE ID: What does the identifier CVE-2004-1496 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1496.

Directory traversal vulnerability in Web Forums Server 1.6 and 2.0 Power Pack allows remote attackers to read arbitrary files via a URL containing (1) "..\" (dot dot backslash), (2) "../" (dot dot slash), (3) "/%2E%2E%5C" (encoded dot dot backslash), or (4) "%2E%2E%2F" (encoded dot dot slash).


Provide references for further information: Can you share references or external links related to CVE-2004-1496?

{'name': '20041102 Multiple Vulnerabilities in Web Forums Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109943267328552&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1496?


Explain the CVE ID: What does the identifier CVE-2004-1497 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1497.

Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local users to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2004-1497?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1497?


Explain the CVE ID: What does the identifier CVE-2004-1498 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1498.

SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary SQL commands via the messageToUserAccNum parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-1498?

{'name': '13079', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13079'}, {'name': '20041102 [Hat-Squad] SQL injection and XSS Vulnerabilities in HELM', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109943858026542&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hat-squad.com/en/000077.html'}, {'name': '11586', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11586'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1498?


Explain the CVE ID: What does the identifier CVE-2004-1499 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1499.

Cross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary web script or HTML via the Subject field.


Provide references for further information: Can you share references or external links related to CVE-2004-1499?

{'name': '13079', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13079'}, {'name': '20041102 [Hat-Squad] SQL injection and XSS Vulnerabilities in HELM', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109943858026542&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hat-squad.com/en/000077.html'}, {'name': '11586', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11586'}, {'name': 'helm-subject-xss(17943)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17943'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1499?


Explain the CVE ID: What does the identifier CVE-2004-1500 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1500.

Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message.


Provide references for further information: Can you share references or external links related to CVE-2004-1500?

{'name': '11610', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11610'}, {'name': 'lithtech-format-string(17972)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17972'}, {'name': '17317', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17317'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/lithfs-adv.txt'}, {'name': '13116', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13116/'}, {'name': '20041105 In-game format string bug in the Lithtech engine', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109969394601331&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1500?


Explain the CVE ID: What does the identifier CVE-2004-1501 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1501.

The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) by sending a POST request with a large Content-Length value, then disconnecting without sending that amount of data.


Provide references for further information: Can you share references or external links related to CVE-2004-1501?

{'name': '602pro-mail-post-dos(17977)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17977'}, {'name': '20041106 Resources consumption in 602 Lan Suite 2004.0.04.0909', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109976745017459&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1501?


Explain the CVE ID: What does the identifier CVE-2004-1502 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1502.

The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (socket exhaustion) via a Telnet request to an IP address of the proxy's network interface, which causes a loop.


Provide references for further information: Can you share references or external links related to CVE-2004-1502?

{'name': '602pro-telnet-loopback-dos(17979)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17979'}, {'name': '20041106 Resources consumption in 602 Lan Suite 2004.0.04.0909', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109976745017459&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1502?


Explain the CVE ID: What does the identifier CVE-2004-1503 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1503.

Integer overflow in the InitialDirContext in Java Runtime Environment (JRE) 1.4.2, 1.5.0 and possibly other versions allows remote attackers to cause a denial of service (Java exception and failed DNS requests) via a large number of DNS requests, which causes the xid variable to wrap around and become negative.


Provide references for further information: Can you share references or external links related to CVE-2004-1503?

{'name': '13142', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13142'}, {'name': '20041108 DOS against Java JNDI/DNS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109994063331773&w=2'}, {'name': '11619', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11619'}, {'name': 'sun-jre-dns-dos(17990)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17990'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1503?


Explain the CVE ID: What does the identifier CVE-2004-1504 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1504.

The displaycontent function in config.php for Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to gain sensitive information via a blank show parameter, which reveals the installation path in an error message, as demonstrated using index.php.


Provide references for further information: Can you share references or external links related to CVE-2004-1504?

{'tags': ['x_refsource_MISC'], 'url': 'http://echo.or.id/adv/adv08-y3dips-2004.txt'}, {'name': 'jaf-cms-path-disclosure(18006)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18006'}, {'name': '20041109 Vulnerabilities in JAF CMS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110004150430309&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1504?


Explain the CVE ID: What does the identifier CVE-2004-1505 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1505.

Directory traversal vulnerability in index.php in Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to read arbitrary files and possibly execute PHP code via a .. (dot dot) in the show parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-1505?

{'name': '13104', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13104'}, {'name': '11627', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11627'}, {'name': 'jaf-cms-file-inlcude(17983)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17983'}, {'tags': ['x_refsource_MISC'], 'url': 'http://echo.or.id/adv/adv08-y3dips-2004.txt'}, {'name': '20041109 Vulnerabilities in JAF CMS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110004150430309&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1505?


Explain the CVE ID: What does the identifier CVE-2004-1506 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1506.

Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar allow remote attackers to inject arbitrary web script via (1) view_entry.php, (2) view_d.php, (3) usersel.php, (4) datesel.php, (5) trailer.php, or (6) styles.php, as demonstrated using img srg tags.


Provide references for further information: Can you share references or external links related to CVE-2004-1506?

{'name': '20041109 Multiple Vulnerabilities in WebCalendar', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110011618724455&w=2'}, {'name': '11651', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11651'}, {'name': 'webcalendar-img-src-xss(18026)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18026'}, {'name': '13164', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13164'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1506?


Explain the CVE ID: What does the identifier CVE-2004-1507 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1507.

CRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF sequences via the return_path parameter and perform HTTP Response Splitting attacks to modify expected HTML content from the server.


Provide references for further information: Can you share references or external links related to CVE-2004-1507?

{'name': '20041109 Multiple Vulnerabilities in WebCalendar', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110011618724455&w=2'}, {'name': 'webcalendar-response-splitting(18027)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18027'}, {'name': '11651', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11651'}, {'name': '13164', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13164'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1507?


Explain the CVE ID: What does the identifier CVE-2004-1508 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1508.

init.php in WebCalendar allows remote attackers to execute arbitrary local PHP scripts via the user_inc parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-1508?

{'name': '20041109 Multiple Vulnerabilities in WebCalendar', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110011618724455&w=2'}, {'name': '11651', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11651'}, {'name': 'webcalendar-init-file-include(18028)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18028'}, {'name': '13164', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13164'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1508?


Explain the CVE ID: What does the identifier CVE-2004-1509 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1509.

validate.php in WebCalendar allows remote attackers to gain sensitive information via an invalid encoded_login parameter, which reveals the full path in an error message.


Provide references for further information: Can you share references or external links related to CVE-2004-1509?

{'name': '20041109 Multiple Vulnerabilities in WebCalendar', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110011618724455&w=2'}, {'name': 'webcalendar-encodedlogin-path-disclosure(18029)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18029'}, {'name': '11651', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11651'}, {'name': '13164', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13164'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1509?


Explain the CVE ID: What does the identifier CVE-2004-1510 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1510.

WebCalendar allows remote attackers to gain privileges by modifying critical parameters to (1) view_entry.php or (2) upcoming.php.


Provide references for further information: Can you share references or external links related to CVE-2004-1510?

{'name': '20041109 Multiple Vulnerabilities in WebCalendar', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110011618724455&w=2'}, {'name': 'webcalendar-scripts-gain-access(18030)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18030'}, {'name': '11651', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11651'}, {'name': '13164', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13164'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1510?


Explain the CVE ID: What does the identifier CVE-2004-1511 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1511.

Hotfoon 4.0 does not notify users before opening links in web browsers, which could allow remote attackers to execute arbitrary code via a certain link sent in a chat window.


Provide references for further information: Can you share references or external links related to CVE-2004-1511?

{'name': '20041110 Hotfoon Ver 4.0 Highv Risk', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110014517703092&w=2'}, {'name': '13173', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13173'}, {'name': 'hotfoon-url-command-execution(18038)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18038'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1511?


Explain the CVE ID: What does the identifier CVE-2004-1512 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1512.

Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted in the resulting default error page.


Provide references for further information: Can you share references or external links related to CVE-2004-1512?

{'name': '11652', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11652'}, {'name': '04webserver-error-xss(18033)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18033'}, {'name': '20041110 04WebServer Three Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110012542615484&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.soft3304.net/04WebServer/Security.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/04webserver142.html'}, {'name': '20041115 Re: 04WebServer Three Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110054395311823&w=2'}, {'name': '13159', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13159/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1512?


Explain the CVE ID: What does the identifier CVE-2004-1513 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1513.

04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries.


Provide references for further information: Can you share references or external links related to CVE-2004-1513?

{'name': '11652', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11652'}, {'name': '20041110 04WebServer Three Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110012542615484&w=2'}, {'name': '04webserver-web-log-spoofing(18034)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18034'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.soft3304.net/04WebServer/Security.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/04webserver142.html'}, {'name': '20041115 Re: 04WebServer Three Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110054395311823&w=2'}, {'name': '13159', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13159/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1513?


Explain the CVE ID: What does the identifier CVE-2004-1514 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1514.

04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP request for an MS-DOS device name such as COM2.


Provide references for further information: Can you share references or external links related to CVE-2004-1514?

{'name': '04webserver-dos-devices-dos(18036)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18036'}, {'name': '11652', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11652'}, {'name': '20041110 04WebServer Three Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110012542615484&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.soft3304.net/04WebServer/Security.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/04webserver142.html'}, {'name': '20041115 Re: 04WebServer Three Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110054395311823&w=2'}, {'name': '13159', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13159/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1514?


Explain the CVE ID: What does the identifier CVE-2004-1515 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1515.

SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php.


Provide references for further information: Can you share references or external links related to CVE-2004-1515?

{'name': '20041111 SQL injection in vBulletin forums (last10.php)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110019198507100&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1515?


Explain the CVE ID: What does the identifier CVE-2004-1516 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1516.

CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the block_username parameter in the user module.


Provide references for further information: Can you share references or external links related to CVE-2004-1516?

{'name': '13172', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13172/'}, {'name': '11673', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11673'}, {'name': '20041111 security hole (http response splitting) in phpwebsite', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110022027420583&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://phpwebsite.appstate.edu/index.php?module=announce&ANN_id=863&ANN_user_op=view'}, {'name': 'phpwebsite-response-splitting(18046)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18046'}, {'name': 'GLSA-200411-35', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200411-35.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1516?


Explain the CVE ID: What does the identifier CVE-2004-1517 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1517.

Zone Labs IMsecure and IMsecure Pro before 1.5 allow remote attackers to bypass Active Link Filtering via an instant message containing a URL with hex encoded file extensions.


Provide references for further information: Can you share references or external links related to CVE-2004-1517?

{'name': '20041111 Zone Labs IMsecure Active Link Filter Bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110020607924001&w=2'}, {'name': 'imsecure-active-link-bypass(18042)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18042'}, {'name': '11662', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11662'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.zonelabs.com/bin/free/securityAlert/16.html'}, {'name': '13169', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13169'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1517?


Explain the CVE ID: What does the identifier CVE-2004-1518 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1518.

SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command via the forum_id parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-1518?

{'name': '13174', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13174'}, {'name': '20041111 [waraxe-2004-SA#037 - Sql injection bug in Phorum 5.0.12 and older versions]', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028609.html'}, {'name': '20041111 [waraxe-2004-SA#037 - Sql injection bug in Phorum 5.0.12 and older versions]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110021385926870&w=2'}, {'name': 'phorum-followphp-sql-injection(18045)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18045'}, {'name': '11660', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11660'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1518?


Explain the CVE ID: What does the identifier CVE-2004-1519 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1519.

SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands via (1) the bug_id parameter in a viewvotes operation or (2) the project parameter in an add operation.


Provide references for further information: Can you share references or external links related to CVE-2004-1519?

{'name': '20041112 SQL Injection in phpBT (bug.php) add project', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110037408101974&w=2'}, {'name': '20041112 SQL Injection in phpBT (bug.php - Add)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110037345428403&w=2'}, {'name': '20041112 SQL Injection in phpBT (bug.php)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110029315521568&w=2'}, {'name': 'phpbugtracker-bug-sql-injection(18053)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18053'}, {'name': '11718', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/displayvuln.php?osvdb_id=11718'}, {'name': 'phpbugtracker-project-sql-injection(18079)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18079'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1519?


Explain the CVE ID: What does the identifier CVE-2004-1520 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1520.

Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command.


Provide references for further information: Can you share references or external links related to CVE-2004-1520?

{'name': '13200', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13200'}, {'name': '20041112 IPSwitch-IMail-8.13 Stack Overflow in the DELETE Command', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110037283803560&w=2'}, {'name': 'ipswitch-delete-bo(18058)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18058'}, {'name': '11675', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11675'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1520?


Explain the CVE ID: What does the identifier CVE-2004-1521 mean in the context of cybersecurity?