Provide references for further information: Can you share references or external links related to CVE-2004-1140?

{'name': 'oval:org.mitre.oval:def:10484', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10484'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00016.html'}, {'name': 'CLA-2005:916', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916'}, {'name': 'GLSA-200412-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-15.xml'}, {'name': '13468', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13468/'}, {'name': 'MDKSA-2004:152', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:152'}, {'name': 'RHSA-2005:037', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-037.html'}, {'name': '11943', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11943'}, {'name': 'Ethereal-rtp-dos(18485)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18485'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'P-061', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-061.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1140?


Explain the CVE ID: What does the identifier CVE-2004-1141 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1141.

The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (application crash) via a certain packet that causes the dissector to access previously-freed memory.


Provide references for further information: Can you share references or external links related to CVE-2004-1141?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00016.html'}, {'name': 'ethereal-http-dissector-dos(18487)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18487'}, {'name': 'CLA-2005:916', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916'}, {'name': 'GLSA-200412-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-15.xml'}, {'name': '13468', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13468/'}, {'name': 'MDKSA-2004:152', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:152'}, {'name': 'RHSA-2005:037', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-037.html'}, {'name': '11943', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11943'}, {'name': 'oval:org.mitre.oval:def:9473', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9473'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'P-061', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-061.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1141?


Explain the CVE ID: What does the identifier CVE-2004-1142 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1142.

Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.


Provide references for further information: Can you share references or external links related to CVE-2004-1142?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00016.html'}, {'name': 'CLA-2005:916', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916'}, {'name': 'GLSA-200412-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-15.xml'}, {'name': '13468', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13468/'}, {'name': 'MDKSA-2004:152', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:152'}, {'name': 'RHSA-2005:037', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-037.html'}, {'name': 'DSA-613', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-613'}, {'name': '11943', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11943'}, {'name': 'oval:org.mitre.oval:def:11278', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11278'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'P-061', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-061.shtml'}, {'name': 'ethereal-smb-dos(18488)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18488'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1142?


Explain the CVE ID: What does the identifier CVE-2004-1143 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1143.

The password generation in mailman before 2.1.5 generates only 5 million unique passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.


Provide references for further information: Can you share references or external links related to CVE-2004-1143?

{'name': '20050110 [USN-59-1] mailman vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110549296126351&w=2'}, {'name': 'mailman-weak-encryption(18857)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18857'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286796'}, {'name': 'SUSE-SA:2005:007', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_07_mailman.html'}, {'name': '13603', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13603/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1143?


Explain the CVE ID: What does the identifier CVE-2004-1144 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1144.

Unknown vulnerability in the 32bit emulation code in Linux 2.4 on AMD64 systems allows local users to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2004-1144?

{'name': 'RHSA-2004:689', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-689.html'}, {'name': 'oval:org.mitre.oval:def:10439', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10439'}, {'name': 'linux-32bit-emulation-gain-privileges(18686)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18686'}, {'name': 'SUSE-SA:2004:046', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://marc.info/?l=bugtraq&m=110376890429798&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1144?


Explain the CVE ID: What does the identifier CVE-2004-1145 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1145.

Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.


Provide references for further information: Can you share references or external links related to CVE-2004-1145?

{'name': 'RHSA-2005:065', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-065.html'}, {'name': '20041220 KDE Security Advisory: Konqueror Java Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110356286722875&w=2'}, {'name': 'konqueror-sandbox-restriction-bypass(18596)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18596'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.heise.de/security/dienste/browsercheck/tests/java.shtml'}, {'name': 'GLSA-200501-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-16.xml'}, {'name': '13586', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13586'}, {'name': 'MDKSA-2004:154', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:154'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20041220-1.txt'}, {'name': 'oval:org.mitre.oval:def:10173', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10173'}, {'name': 'VU#420222', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/420222'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1145?


Explain the CVE ID: What does the identifier CVE-2004-1146 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1146.

Multiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for CVSTrac before 1.1.5 allow remote attackers to inject arbitrary HTML and web script.


Provide references for further information: Can you share references or external links related to CVE-2004-1146?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.mikx.de/index.php?p=6'}, {'name': '20041223 Cross-Site Scripting - an industry-wide problem', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cvstrac.org/cvstrac/chngview?cn=320'}, {'name': 'cvstrac-main-login-xss(18726)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18726'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cvstrac.org/cvstrac/chngview?cn=321'}, {'name': 'OpenPKG-SA-2004.056', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://marc.info/?l=bugtraq&m=110332469631253&w=2'}, {'name': '12017', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12017'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1146?


Explain the CVE ID: What does the identifier CVE-2004-1147 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1147.

phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary commands via shell metacharacters.


Provide references for further information: Can you share references or external links related to CVE-2004-1147?

{'name': 'phpmyadmin-command-execute(18441)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18441'}, {'name': '20041213 Multiple vulnerabilities in phpMyAdmin', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110295781828323&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.exaprobe.com/labs/advisories/esa-2004-1213.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1147?


Explain the CVE ID: What does the identifier CVE-2004-1148 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1148.

phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sql_localfile parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-1148?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1148?


Explain the CVE ID: What does the identifier CVE-2004-1149 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1149.

Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files with insecure permissions (ACLs), which allows local users to gain privileges by replacing critical programs with malicious ones, as demonstrated using VetMsg.exe.


Provide references for further information: Can you share references or external links related to CVE-2004-1149?

{'name': 'etrust-antivirus-insecure-permissions(18502)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18502'}, {'name': '20041215 Computer Associates eTrust EZ Antivirus Insecure File Permission Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=164'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crm.my-etrust.com/login.asp?username=guest&target=DOCUMENT&openparameter'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1149?


Explain the CVE ID: What does the identifier CVE-2004-1150 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1150.

Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long (1) device name or (2) sound track number, as demonstrated with a .m3u or .pls playlist file.


Provide references for further information: Can you share references or external links related to CVE-2004-1150?

{'name': 'winamp-incdda-bo(18840)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18840'}, {'name': '12381', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12381'}, {'name': '13781', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13781'}, {'name': '20050127 NSFOCUS SA2005-01 : Buffer Overflow in WinAMP in_cdda.dll CDA Device Name', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110684140108614&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nsfocus.com/english/homepage/research/0501.htm'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.winamp.com/player/version_history.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1150?


Explain the CVE ID: What does the identifier CVE-2004-1151 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1151.

Multiple buffer overflows in the (1) sys32_ni_syscall and (2) sys32_vm86_warning functions in sys_ia32.c for Linux 2.6.x may allow local attackers to modify kernel memory and gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2004-1151?

{'tags': ['x_refsource_MISC'], 'url': 'http://linux.bkbits.net:8080/linux-2.6/cset%401.2079'}, {'name': 'MDKSA-2005:022', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:022'}, {'name': '20041214 [USN-38-1] Linux kernel vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110306397320336&w=2'}, {'name': 'SUSE-SA:2004:044', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_44_kernel.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://linux.bkbits.net:8080/linux-2.6/gnupatch%4041ae6af1cR3mJYlW6D8EHxCKSxuJiQ'}, {'name': '[linux-kernel] 20041130 Buffer overrun in arch/x86_64/sys_ia32.c:sys32_ni_syscall()', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.ussg.iu.edu/hypermail/linux/kernel/0411.3/1467.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1151?


Explain the CVE ID: What does the identifier CVE-2004-1152 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1152.

Buffer overflow in the mailListIsPdf function in Adobe Acrobat Reader 5.09 for Unix allows remote attackers to execute arbitrary code via an e-mail message with a crafted PDF attachment.


Provide references for further information: Can you share references or external links related to CVE-2004-1152?

{'name': '20041214 Adobe Acrobat Reader 5.0.9 mailListIsPdf() Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=161&type=vulnerabilities&flashstatus=false'}, {'name': '13474', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13474'}, {'name': 'adobe-acrobat-maillistlspdf-bo(18477)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18477'}, {'name': 'SUSE-SR:2005:001', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_01_sr.html'}, {'name': 'VU#253024', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/253024'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/331153.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1152?


Explain the CVE ID: What does the identifier CVE-2004-1153 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1153.

Format string vulnerability in Adobe Acrobat Reader 6.0.0 through 6.0.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an .ETD document containing format string specifiers in (1) title or (2) baseurl fields.


Provide references for further information: Can you share references or external links related to CVE-2004-1153?

{'name': '20041214 Adobe Reader 6.0 .ETD File Format String Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=163&type=vulnerabilities'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/downloads/detail.jsp?ftpID=2679'}, {'name': 'oval:org.mitre.oval:def:2919', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2919'}, {'name': 'adobe-acrobat-etd-format-string(18478)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18478'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1153?


Explain the CVE ID: What does the identifier CVE-2004-1154 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1154.

Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2004-1154?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.samba.org/samba/security/CAN-2004-1154.html'}, {'name': '101643', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101643-1'}, {'name': 'oval:org.mitre.oval:def:10236', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10236'}, {'name': '11973', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11973'}, {'name': 'samba-msrpc-heap-corruption(18519)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18519'}, {'name': 'RHSA-2005:020', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-020.html'}, {'name': 'oval:org.mitre.oval:def:642', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A642'}, {'name': '13453', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13453/'}, {'name': 'DSA-701', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-701'}, {'name': 'APPLE-SA-2005-03-21', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html'}, {'name': '57730', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57730-1'}, {'name': '20041216 Samba smbd Security Descriptor Integer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=165&type=vulnerabilities'}, {'name': 'SUSE-SA:2004:045', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_45_samba.html'}, {'name': 'oval:org.mitre.oval:def:1459', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1459'}, {'name': 'SCOSA-2005.17', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt'}, {'name': 'VU#226184', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/226184'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1154?


Explain the CVE ID: What does the identifier CVE-2004-1155 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1155.

Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.  NOTE: later research shows that Internet Explorer 7 on Windows XP SP2 is also vulnerable.


Provide references for further information: Can you share references or external links related to CVE-2004-1155?

{'name': '11855', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11855'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/multiple_browsers_window_injection_vulnerability_test/'}, {'name': '22628', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22628'}, {'name': '20061025 IE7 status: 8 days after release, 3 unfixed issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/449917/100/0/threaded'}, {'name': '13251', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13251/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2004-13/advisory/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1155?


Explain the CVE ID: What does the identifier CVE-2004-1156 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1156.

Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2004-1156?

{'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/multiple_browsers_window_injection_vulnerability_test/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2004-13/advisory/'}, {'name': '13129', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13129/'}, {'name': 'oval:org.mitre.oval:def:10117', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10117'}, {'name': 'RHSA-2005:176', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-176.html'}, {'name': 'RHSA-2005:384', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-384.html'}, {'name': 'GLSA-200503-30', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/mfsa2005-13.html'}, {'name': 'GLSA-200503-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml'}, {'name': 'oval:org.mitre.oval:def:100045', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100045'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1156?


Explain the CVE ID: What does the identifier CVE-2004-1157 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1157.

Opera 7.x up to 7.54, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2004-1157?

{'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/multiple_browsers_window_injection_vulnerability_test/'}, {'name': '13253', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13253/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2004-13/advisory/'}, {'name': 'GLSA-200502-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1157?


Explain the CVE ID: What does the identifier CVE-2004-1158 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1158.

Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2004-1158?

{'name': '13486', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13486'}, {'name': 'oval:org.mitre.oval:def:11056', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11056'}, {'name': '13254', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13254'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/multiple_browsers_window_injection_vulnerability_test/'}, {'name': '13560', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13560'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2004-13/advisory/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20041213-1.txt'}, {'name': 'SUSE-SR:2005:001', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_01_sr.html'}, {'name': 'RHSA-2005:009', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-009.html'}, {'name': '20041213 KDE Security Advisory: Konqueror Window Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110296048613575&w=2'}, {'name': '13477', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13477'}, {'name': '11853', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11853'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1158?


Explain the CVE ID: What does the identifier CVE-2004-1159 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1159.


Provide references for further information: Can you share references or external links related to CVE-2004-1159?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1159?


Explain the CVE ID: What does the identifier CVE-2004-1160 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1160.

Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2004-1160?

{'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/multiple_browsers_window_injection_vulnerability_test/'}, {'name': '11852', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11852'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2004-13/advisory/'}, {'name': '13402', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13402/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1160?


Explain the CVE ID: What does the identifier CVE-2004-1161 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1161.

rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via (1) rdist -P, (2) rsync, or (3) scp -S.


Provide references for further information: Can you share references or external links related to CVE-2004-1161?

{'name': 'GLSA-200412-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-01.xml'}, {'name': '11792', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11792'}, {'name': '20050115 Re: rssh and scponly arbitrary command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110581113814623&w=2'}, {'name': '20041202 rssh and scponly arbitrary command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110202047507273&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1161?


Explain the CVE ID: What does the identifier CVE-2004-1162 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1162.

The unison command in scponly before 4.0 does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via the (1) -rshcmd or (2) -sshcmd flags.


Provide references for further information: Can you share references or external links related to CVE-2004-1162?

{'name': 'GLSA-200412-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-01.xml'}, {'name': '20050115 Re: rssh and scponly arbitrary command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110581113814623&w=2'}, {'name': '20041202 rssh and scponly arbitrary command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110202047507273&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sublimation.org/scponly/#relnotes'}, {'name': 'scponly-commandline-command-execution(18362)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18362'}, {'name': '11791', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11791'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1162?


Explain the CVE ID: What does the identifier CVE-2004-1163 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1163.

Cisco CNS Network Registrar Central Configuration Management (CCM) server 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (CPU consumption) by ending a connection after sending a certain sequence of packets.


Provide references for further information: Can you share references or external links related to CVE-2004-1163?

{'name': '20041202 Cisco Network Registrar Denial of Service Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a008036786d.shtml'}, {'name': 'cisco-cns-ccm-dos(18327)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18327'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1163?


Explain the CVE ID: What does the identifier CVE-2004-1164 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1164.

The lock manager in Cisco CNS Network Registrar 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (process crash) via a certain "unexpected packet sequence."


Provide references for further information: Can you share references or external links related to CVE-2004-1164?

{'name': 'cisco-cns-lock-dos(18328)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18328'}, {'name': '20041202 Cisco Network Registrar Denial of Service Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a008036786d.shtml'}, {'name': '11793', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11793'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1164?


Explain the CVE ID: What does the identifier CVE-2004-1165 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1165.

Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.


Provide references for further information: Can you share references or external links related to CVE-2004-1165?

{'name': 'RHSA-2005:065', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-065.html'}, {'name': 'GLSA-200501-18', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-18.xml'}, {'name': 'oval:org.mitre.oval:def:9645', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9645'}, {'name': 'web-browser-ftp-command-execution(18384)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18384'}, {'name': 'DSA-631', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-631'}, {'name': '20041205 7a69Adv#16 - Konqueror FTP command injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110245752232681&w=2'}, {'name': 'RHSA-2005:009', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-009.html'}, {'name': 'MDKSA-2005:045', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:045'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1165?


Explain the CVE ID: What does the identifier CVE-2004-1166 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1166.

CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.


Provide references for further information: Can you share references or external links related to CVE-2004-1166?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/advisories/R7-0032.jsp'}, {'name': 'MS06-042', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042'}, {'name': '20080313 Rapid7 Advisory R7-0032: Microsoft Internet Explorer FTP Command Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489500/100/0/threaded'}, {'name': '20041207 7a69Adv#15 - Internet Explorer FTP command injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110253463305359&w=2'}, {'name': '29346', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29346'}, {'name': '11826', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11826'}, {'name': 'web-browser-ftp-command-execution(18384)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18384'}, {'name': 'ADV-2006-3212', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/3212'}, {'name': '28208', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28208'}, {'name': 'ADV-2008-0870', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0870'}, {'name': '12299', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/12299'}, {'name': 'oval:org.mitre.oval:def:462', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A462'}, {'name': '13404', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13404'}, {'name': '1012444', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012444'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1166?


Explain the CVE ID: What does the identifier CVE-2004-1167 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1167.

mirrorselect before 0.89 creates temporary files in a world-writable location with predictable file names, which allows remote attackers to overwrite arbitrary files via a symlink attack.


Provide references for further information: Can you share references or external links related to CVE-2004-1167?

{'name': 'GLSA-200412-05', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-05.xml'}, {'name': 'mirrorselect-symlink(18382)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18382'}, {'name': '13392', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13392/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1167?


Explain the CVE ID: What does the identifier CVE-2004-1168 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1168.

Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to execute arbitrary code via a long Overwrite header.


Provide references for further information: Can you share references or external links related to CVE-2004-1168?

{'name': 'maxdb-webdav-bo(18386)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18386'}, {'name': '20041207 MaxDB WebTools <= 7.5.00.18 buffer overflow and Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110244542000340&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1168?


Explain the CVE ID: What does the identifier CVE-2004-1169 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1169.

MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to cause a denial of service (application crash) via an HTTP GET request for a file that does not exist, followed by two carriage returns, which causes a NULL dereference.


Provide references for further information: Can you share references or external links related to CVE-2004-1169?

{'name': '20041207 MaxDB WebTools <= 7.5.00.18 buffer overflow and Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110244542000340&w=2'}, {'name': 'maxdb-dos(18387)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18387'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1169?


Explain the CVE ID: What does the identifier CVE-2004-1170 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1170.

a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.


Provide references for further information: Can you share references or external links related to CVE-2004-1170?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/283134'}, {'name': '20040824 a2ps executing shell commands from file name', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1026.html'}, {'name': 'OpenPKG-SA-2005.003', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://marc.info/?l=bugtraq&m=110598355226660&w=2'}, {'name': 'SUSE-SA:2004:034', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_34_xfree86_libs_xshared.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/unixfocus/5MP0N2KDPA.html'}, {'name': 'FLSA:152870', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/419765/100/0/threaded'}, {'name': '57649', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57649-1&searchclause='}, {'name': '12375', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12375'}, {'name': 'gnu-a2ps-gain-privileges(17127)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17127'}, {'name': 'MDKSA-2004:140', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:140'}, {'name': '11025', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11025'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1170?


Explain the CVE ID: What does the identifier CVE-2004-1171 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1171.

KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the user or (2) created by the SMB protocol handler, stores those credentials for plaintext in the user's .desktop file, which may be created with world-readable permissions, which could allow local users to obtain usernames and passwords for remote resources such as SMB shares.


Provide references for further information: Can you share references or external links related to CVE-2004-1171?

{'name': '13486', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13486'}, {'name': 'VU#305294', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/305294'}, {'name': '11866', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11866'}, {'name': '1012471', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012471'}, {'name': 'P-051', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-051.shtml'}, {'name': "20041129 Password Disclosure for SMB Shares in KDE's Konqueror", 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1292.html'}, {'name': '13560', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13560'}, {'name': 'kde-smb-password-plaintext(18267)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18267'}, {'name': 'MDKSA-2004:150', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:150'}, {'name': '20041209 KDE Security Advisory: plain text password exposure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110261063201488&w=2'}, {'name': '12248', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/12248'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.sec-consult.com/index.php?id=118'}, {'name': 'GLSA-200412-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-16.xml'}, {'name': "20041129 Password Disclosure for SMB Shares in KDE's Konqueror", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110178786809694&w=2'}, {'name': '13477', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13477'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20041209-1.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1171?


Explain the CVE ID: What does the identifier CVE-2004-1172 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1172.

Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, allows remote attackers to execute arbitrary code via a registration request with a long hostname.


Provide references for further information: Can you share references or external links related to CVE-2004-1172?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://seer.support.veritas.com/docs/273419.htm'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.frsirt.com/exploits/20050111.101_BXEC.cpp.php'}, {'name': '11974', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11974'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://seer.support.veritas.com/docs/273850.htm'}, {'name': 'VU#907729', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/907729'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://seer.support.veritas.com/docs/273422.htm'}, {'name': '13495', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13495/'}, {'name': 'netbackup-agent-browser-bo(18506)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18506'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://seer.support.veritas.com/docs/273420.htm'}, {'name': '20041216 Veritas Backup Exec Agent Browser Registration Request Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=169'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1172?


Explain the CVE ID: What does the identifier CVE-2004-1173 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1173.

Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model (DOM) methods in the DHTML Dynamic HTML (DHTML) Editing Component (DEC) and Javascript that calls showModalDialog.


Provide references for further information: Can you share references or external links related to CVE-2004-1173?

{'name': 'ie-popup-blocking-bypass(18444)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18444'}, {'name': '20041210 HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut !', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=110271016129952&w=2'}, {'name': '20041210 HOW TO BREAK XP SP2 POPUP BLOCKER: kick it in the nut !', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110271114525795&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1173?


Explain the CVE ID: What does the identifier CVE-2004-1174 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1174.

direntry.c in Midnight Commander (mc) 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles."


Provide references for further information: Can you share references or external links related to CVE-2004-1174?

{'name': '13863', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13863/'}, {'name': '1012903', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012903'}, {'name': 'DSA-639', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-639'}, {'name': 'midnight-commander-direntry-dos(18909)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18909'}, {'name': 'RHSA-2005:512', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-512.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1174?


Explain the CVE ID: What does the identifier CVE-2004-1175 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1175.

fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters.


Provide references for further information: Can you share references or external links related to CVE-2004-1175?

{'name': 'midnight-commander-command-execution(18906)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18906'}, {'name': '13863', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13863/'}, {'name': '1012903', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012903'}, {'name': 'DSA-639', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-639'}, {'name': 'RHSA-2005:512', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-512.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1175?


Explain the CVE ID: What does the identifier CVE-2004-1176 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1176.

Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-1176?

{'name': 'midnight-commander-extfs-dos(18911)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18911'}, {'name': '13863', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13863'}, {'name': 'RHSA-2005:217', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-217.html'}, {'name': '1012903', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012903'}, {'name': 'DSA-639', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-639'}, {'name': 'GLSA-200502-24', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-24.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1176?


Explain the CVE ID: What does the identifier CVE-2004-1177 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1177.

Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page.


Provide references for further information: Can you share references or external links related to CVE-2004-1177?

{'name': '20050110 [USN-59-1] mailman vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110549296126351&w=2'}, {'name': 'mailman-script-driver-xss(18854)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18854'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=287555'}, {'name': '13603', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13603'}, {'name': 'MDKSA-2005:015', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:015'}, {'name': 'SUSE-SA:2005:007', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_07_mailman.html'}, {'name': 'DSA-674', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-674'}, {'name': 'RHSA-2005:235', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-235.html'}, {'name': 'oval:org.mitre.oval:def:11113', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11113'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1177?


Explain the CVE ID: What does the identifier CVE-2004-1179 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1179.

The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files via a symlink attack on temporary directories.


Provide references for further information: Can you share references or external links related to CVE-2004-1179?

{'name': '12078', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12078'}, {'name': '20041223 [USN-49-1] debmake vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-12/0645.html'}, {'name': 'DSA-615', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-615'}, {'name': '13633', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13633/'}, {'name': 'debmake-debstd-symlink(18646)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18646'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1179?


Explain the CVE ID: What does the identifier CVE-2004-1180 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1180.

Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows remote attackers to cause a denial of service (application crash).


Provide references for further information: Can you share references or external links related to CVE-2004-1180?

{'name': 'DSA-678', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-678'}, {'name': 'MDKSA-2005:039', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:039'}, {'name': '14309', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14309'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.novell.com/linux/download/updates/81_i386.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1180?


Explain the CVE ID: What does the identifier CVE-2004-1181 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1181.

htmlheadline before 21.8 allows local users to overwrite arbitrary files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2004-1181?

{'name': 'DSA-622', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-622'}, {'name': '12147', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12147'}, {'name': 'htmlheadline-symlink(18737)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18737'}, {'name': '13715', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13715'}, {'name': '1012756', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012756'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1181?


Explain the CVE ID: What does the identifier CVE-2004-1182 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1182.

hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted (1) username or (2) hostname that satisfies a regular expression that is matched against a hosts.hfaxd entry without a password.


Provide references for further information: Can you share references or external links related to CVE-2004-1182?

{'name': 'GLSA-200501-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200501-21.xml'}, {'name': 'DSA-634', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-634'}, {'name': 'MDKSA-2005:006', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:006'}, {'name': '20050111 HylaFAX hfaxd unauthorized login vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110546971307585&w=2'}, {'name': '[hylafax-announce] 20050111 **ANOUNCE** hylafax-4.2.1 released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=hylafax&m=110545119911558&w=2'}, {'name': '13812', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13812'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1182?


Explain the CVE ID: What does the identifier CVE-2004-1183 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1183.

Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file.


Provide references for further information: Can you share references or external links related to CVE-2004-1183?

{'name': 'RHSA-2005:019', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-019.html'}, {'name': 'MDKSA-2005:001', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:001'}, {'name': 'oval:org.mitre.oval:def:9743', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9743'}, {'name': 'MDKSA-2005:002', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:002'}, {'name': '12173', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12173'}, {'name': 'DSA-626', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-626'}, {'name': '13728', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13728/'}, {'name': 'libtiff-tiffdump-bo(18782)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18782'}, {'name': 'SUSE-SA:2005:001', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_01_libtiff_tiff.html'}, {'name': '20050106 [USN-54-1] TIFF library tool vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110503635113419&w=2'}, {'name': 'MDKSA-2005:052', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:052'}, {'name': 'GLSA-200501-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200501-06.xml'}, {'name': 'RHSA-2005:035', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-035.html'}, {'name': 'CLA-2005:920', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000920'}, {'name': '13776', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13776'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1183?


Explain the CVE ID: What does the identifier CVE-2004-1184 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1184.

The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.


Provide references for further information: Can you share references or external links related to CVE-2004-1184?

{'name': 'oval:org.mitre.oval:def:9658', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9658'}, {'name': 'FLSA:152892', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/419768/100/0/threaded'}, {'name': '12329', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12329'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT3549'}, {'name': 'MDKSA-2005:033', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:033'}, {'name': 'USN-68-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/68-1/'}, {'name': '1012965', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012965'}, {'name': '35074', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35074'}, {'name': 'DSA-654', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-654'}, {'name': 'APPLE-SA-2009-05-12', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2009/May/msg00002.html'}, {'name': '20060526 rPSA-2006-0083-1 enscript', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/435199/100/0/threaded'}, {'name': 'TA09-133A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA09-133A.html'}, {'name': 'ADV-2009-1297', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1297'}, {'name': 'RHSA-2005:040', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-040.html'}, {'name': 'GLSA-200502-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml'}, {'name': 'enscript-epsf-command-ececution(19012)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19012'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1184?


Explain the CVE ID: What does the identifier CVE-2004-1185 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1185.

Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.


Provide references for further information: Can you share references or external links related to CVE-2004-1185?

{'name': 'FLSA:152892', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/419768/100/0/threaded'}, {'name': '12329', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12329'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT3549'}, {'name': 'oval:org.mitre.oval:def:10808', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10808'}, {'name': 'MDKSA-2005:033', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:033'}, {'name': 'USN-68-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/68-1/'}, {'name': '1012965', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012965'}, {'name': '35074', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35074'}, {'name': 'DSA-654', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-654'}, {'name': 'APPLE-SA-2009-05-12', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2009/May/msg00002.html'}, {'name': '20060526 rPSA-2006-0083-1 enscript', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/435199/100/0/threaded'}, {'name': 'enscript-filename-command-execution(19029)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19029'}, {'name': 'TA09-133A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA09-133A.html'}, {'name': 'ADV-2009-1297', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1297'}, {'name': 'RHSA-2005:040', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-040.html'}, {'name': 'GLSA-200502-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1185?


Explain the CVE ID: What does the identifier CVE-2004-1186 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1186.

Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).


Provide references for further information: Can you share references or external links related to CVE-2004-1186?

{'name': 'enscript-multiple-bo(19033)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19033'}, {'name': 'FLSA:152892', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/419768/100/0/threaded'}, {'name': '12329', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12329'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT3549'}, {'name': 'MDKSA-2005:033', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:033'}, {'name': 'USN-68-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/68-1/'}, {'name': '1012965', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012965'}, {'name': '35074', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35074'}, {'name': 'DSA-654', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-654'}, {'name': 'APPLE-SA-2009-05-12', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2009/May/msg00002.html'}, {'name': 'oval:org.mitre.oval:def:11134', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11134'}, {'name': '20060526 rPSA-2006-0083-1 enscript', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/435199/100/0/threaded'}, {'name': 'TA09-133A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA09-133A.html'}, {'name': 'ADV-2009-1297', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1297'}, {'name': 'RHSA-2005:040', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-040.html'}, {'name': 'GLSA-200502-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1186?


Explain the CVE ID: What does the identifier CVE-2004-1187 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1187.

Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNA_TAG values, a different vulnerability than CVE-2004-1188.


Provide references for further information: Can you share references or external links related to CVE-2004-1187?

{'name': 'xine-pnatag-bo(18640)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18640'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mplayerhq.hu/MPlayer/patches/pnm_fix_20041215.diff'}, {'name': '20041221 Multiple Vendor Xine version 0.99.2 PNM Handler PNA_TAG Heap Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=176&type=vulnerabilities'}, {'name': 'MDKSA-2005:011', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:011'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/pnm.c?r1=1.20&r2=1.21'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1187?


Explain the CVE ID: What does the identifier CVE-2004-1188 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1188.

The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLE_SIZE, which causes a read operation with a negative length that leads to a buffer overflow via (1) RMF_TAG, (2) DATA_TAG, (3) PROP_TAG, (4) MDPR_TAG, and (5) CONT_TAG values, a different vulnerability than CVE-2004-1187.


Provide references for further information: Can you share references or external links related to CVE-2004-1188?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mplayerhq.hu/MPlayer/patches/pnm_fix_20041215.diff'}, {'name': 'MDKSA-2005:011', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:011'}, {'name': '20041221 Multiple Vendor Xine version 0.99.2 PNM Handler Negative Read Length Heap Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=177&type=vulnerabilities'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/pnm.c?r1=1.20&r2=1.21'}, {'name': 'xine-pnmgetchunk-bo(18638)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18638'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1188?


Explain the CVE ID: What does the identifier CVE-2004-1189 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1189.

The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow authenticated users to execute arbitrary code via a heap-based buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2004-1189?

{'name': 'CLA-2005:917', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000917'}, {'name': 'oval:org.mitre.oval:def:11911', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11911'}, {'name': 'kerberos-libkadm5srv-bo(18621)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18621'}, {'name': 'RHSA-2005:012', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-012.html'}, {'name': 'APPLE-SA-2005-08-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html'}, {'name': '20050110 [USN-58-1] MIT Kerberos server vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110548298407590&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2004-004-pwhist.txt'}, {'name': 'APPLE-SA-2005-08-17', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html'}, {'name': '2004-0069', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0069'}, {'name': 'RHSA-2005:045', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-045.html'}, {'name': '20041220 MITKRB5-SA-2004-004: heap overflow in libkadm5srv', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110358420909358&w=2'}, {'name': 'MDKSA-2004:156', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:156'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1189?


Explain the CVE ID: What does the identifier CVE-2004-1190 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1190.

SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices.


Provide references for further information: Can you share references or external links related to CVE-2004-1190?

{'name': 'RHSA-2006:0101', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2006-0101.html'}, {'name': 'SUSE-SA:2004:042', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_42_kernel.html'}, {'name': '18510', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18510'}, {'name': '11784', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11784'}, {'name': 'suse-scsi-firmware-overwrite(18370)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18370'}, {'name': 'oval:org.mitre.oval:def:9369', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9369'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1190?


Explain the CVE ID: What does the identifier CVE-2004-1191 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1191.

Race condition in SuSE Linux 8.1 through 9.2, when run on SMP systems that have more than 4GB of memory, could allow local users to read unauthorized memory from "foreign memory pages."


Provide references for further information: Can you share references or external links related to CVE-2004-1191?

{'name': 'SUSE-SA:2004:042', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_42_kernel.html'}, {'name': 'linux-smbrecvtrans2-memory-leak(18137)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18137'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1191?


Explain the CVE ID: What does the identifier CVE-2004-1192 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1192.

Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server.


Provide references for further information: Can you share references or external links related to CVE-2004-1192?

{'name': '20041214 Re: Citadel/UX <= v6.27 Remote Format String Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110304986223400&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nosystem.com.ar/advisories/advisory-09.txt'}, {'name': 'citadel-format-string(18429)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18429'}, {'name': '20041213 Citadel/UX <= v6.27 Remote Format String Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110295469430696&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1192?


Explain the CVE ID: What does the identifier CVE-2004-1193 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1193.

Prevx Home 1.0 allows local users with administrator privileges to bypass the intrusion prevention features by directly writing to \device\physicalmemory, which restores the running kernel's original SDT ServiceTable.


Provide references for further information: Can you share references or external links related to CVE-2004-1193?

{'name': '1012294', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012294'}, {'name': '20041122 [SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110118902823639&w=2'}, {'name': 'prevx-home-settings-disable(18195)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18195'}, {'name': '20041124 Re: [SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110138413816367&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1193?


Explain the CVE ID: What does the identifier CVE-2004-1194 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1194.

Buffer overflow in Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (application crash) via a long nickname.


Provide references for further information: Can you share references or external links related to CVE-2004-1194?

{'name': '11750', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11750'}, {'name': '20041124 Limited buffer-overflow and arbitrary memory access in Star Wars', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110132227932050&w=2'}, {'name': 'star-wars-nickname-bo(18256)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18256'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1194?


Explain the CVE ID: What does the identifier CVE-2004-1195 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1195.

Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (application crash) via a join request that contains a memory address that causes the server to read arbitrary memory.


Provide references for further information: Can you share references or external links related to CVE-2004-1195?

{'name': '11750', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11750'}, {'name': '20041124 Limited buffer-overflow and arbitrary memory access in Star Wars Battlefront 1.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110132227932050&w=2'}, {'name': 'star-wars-packet-dos(18257)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18257'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1195?


Explain the CVE ID: What does the identifier CVE-2004-1196 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1196.

Cross-site scripting (XSS) vulnerability in inmail.pl in Insite Inmail allows remote attackers to inject arbitrary web script or HTML via the acao parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-1196?

{'name': 'insite-inmail-inshop-xss(18268)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18268'}, {'name': '20041124 XSS in Brazilian Insite products', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110140029419018&w=2'}, {'name': '13188', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13188/'}, {'name': '11758', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11758'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1196?


Explain the CVE ID: What does the identifier CVE-2004-1197 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1197.

Cross-site scripting (XSS) vulnerability in inshop.pl in Insite inShop allows remote attackers to inject arbitrary web script or HTML via the screen parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-1197?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1197?


Explain the CVE ID: What does the identifier CVE-2004-1198 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1198.

Microsoft Internet Explorer allows remote attackers to cause a denial of service (application crash from memory consumption), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays.


Provide references for further information: Can you share references or external links related to CVE-2004-1198?

{'name': 'web-browser-array-dos(18282)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18282'}, {'name': '11751', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11751'}, {'name': '20041125 MSIE & FIREFOX flaws: "detailed" advisory and comments that you probably don\'t want to read anyway', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1221.html'}, {'name': '20041125 MSIE flaws: nested array sort() loop Stack overflow exception', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/382257'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1198?


Explain the CVE ID: What does the identifier CVE-2004-1199 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1199.

Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays.


Provide references for further information: Can you share references or external links related to CVE-2004-1199?

{'name': 'web-browser-array-dos(18282)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18282'}, {'name': '20041125 More Browser flaws on MACOSX: nested array sort() loop Stack overflow exception', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029458.html'}, {'name': '11759', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11759'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1199?


Explain the CVE ID: What does the identifier CVE-2004-1200 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1200.

Firefox and Mozilla allow remote attackers to cause a denial of service (application crash from memory consumption), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays.


Provide references for further information: Can you share references or external links related to CVE-2004-1200?

{'name': '20041125 FIREFOX flaws: nested array sort() loop Stack overflow exception', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029434.html'}, {'name': 'web-browser-array-dos(18282)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18282'}, {'name': '11752', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11752'}, {'name': '20041125 MSIE & FIREFOX flaws: "detailed" advisory and comments that you probably don\'t want to read anyway', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029491.html'}, {'name': '11760', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11760'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1200?


Explain the CVE ID: What does the identifier CVE-2004-1201 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1201.

Opera 7.54 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays.


Provide references for further information: Can you share references or external links related to CVE-2004-1201?

{'name': 'web-browser-array-dos(18282)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18282'}, {'name': '20041125 Re: Opera flaws: nested array sort() loop Stack overflow exception', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=110144136213993&w=2'}, {'name': '20041125 Re: MSIE flaws: nested array sort() loop Stack overflow exception', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=110141347502530&w=2'}, {'name': '11762', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11762'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1201?


Explain the CVE ID: What does the identifier CVE-2004-1202 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1202.

Cross-site scripting (XSS) vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to inject arbitrary web script or HTML via the file parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-1202?

{'name': '20041126 phpCMS <= 1.2.1 Xss Vulnerability, Information disclosure', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029499.html'}, {'name': 'phpcms-parser-xss(18272)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18272'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.phpcms.de/download/index.en.html'}, {'name': '20041126 phpCMS <= 1.2.1 Xss Vulnerability, Information disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110149207123510&w=2'}, {'name': '11765', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11765'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1202?


Explain the CVE ID: What does the identifier CVE-2004-1203 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1203.

parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via an invalid file parameter, which reveals the web server's installation path.


Provide references for further information: Can you share references or external links related to CVE-2004-1203?

{'name': '20041126 phpCMS <= 1.2.1 Xss Vulnerability, Information disclosure', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029499.html'}, {'name': 'phpcms-parser-xss(18272)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18272'}, {'name': '20041126 phpCMS <= 1.2.1 Xss Vulnerability, Information disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110149207123510&w=2'}, {'name': 'phpcms-parser-path-disclosure(18279)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18279'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1203?


Explain the CVE ID: What does the identifier CVE-2004-1204 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1204.

FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service (application crash) by calling Xman with a long -title value, possibly triggering a buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2004-1204?

{'name': '20041126 FluxBox crash vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110149783715867&w=2'}, {'name': 'fluxbox-xman-dos(18264)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18264'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1204?


Explain the CVE ID: What does the identifier CVE-2004-1205 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1205.

codebrowserpntm.php in PnTresMailer 6.03 allows remote attackers to gain sensitive information via an invalid filetohighlight parameter, which reveals the full path in an error message.