Provide references for further information: Can you share references or external links related to CVE-2004-1975?

{'name': 'pafiledb-pafiledbphp-xss(15992)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15992'}, {'name': '20040427 Multiple vulnerabilities paFileDB', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108311096022485&w=2'}, {'name': '10229', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10229'}, {'name': '20040925 New XSS vulnerabilities in paFileDB 3.1 final', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109613031414184&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1975?


Explain the CVE ID: What does the identifier CVE-2004-1976 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1976.

SMC Barricade broadband router 7008ABR and 7004VBR enable remote administration by default, which allows remote attackers to gain access by connecting to port 1900.


Provide references for further information: Can you share references or external links related to CVE-2004-1976?

{'name': '10232', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10232'}, {'name': '20040428 SMC Routers have remote administration enabled by default', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108317929931816&w=2'}, {'name': '20040427 SMC Routers have remote administration enabled by default', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020580.html'}, {'name': '20040605 SMC 7008ABRv2 and 7004VBRv1 updated firmware corrects port 1900 issue.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2004-06/0101.html'}, {'name': 'barricade-router-gain-access(15993)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15993'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1976?


Explain the CVE ID: What does the identifier CVE-2004-1977 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1977.

3com NBX IP VOIP NetSet Configuration Manager allows remote attackers to cause a denial of service (crash) via a Nessus scan in safeChecks mode.


Provide references for further information: Can you share references or external links related to CVE-2004-1977?

{'name': '10240', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10240'}, {'name': '20040429 3com NBX VOIP NetSet Denial of Service Attack', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0092.html'}, {'name': '3com-nbx-scan-dos(16015)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16015'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.secnap.net/security/20040420.html'}, {'name': '20040429 3com NBX VOIP NetSet Denial of Service Attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108334887408554&w=2'}, {'name': '11504', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11504'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1977?


Explain the CVE ID: What does the identifier CVE-2004-1978 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1978.

Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary HTML and web script via the text parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-1978?

{'name': '5747', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5747'}, {'name': '20040430 Cross Site Scripting in Moodle < 1.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108335043825605&w=2'}, {'name': '10251', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10251'}, {'name': 'moodle-help-xss(16023)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16023'}, {'name': '11535', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11535'}, {'name': '1010008', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010008'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1978?


Explain the CVE ID: What does the identifier CVE-2004-1979 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1979.

Cross-site scripting (XSS) vulnerability in do_search.php in PROPS 0.6.1 allows remote attackers to inject arbitrary HTML or web script via the search_string parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-1979?

{'name': 'props-dosearch-xss(16035)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16035'}, {'name': '10258', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10258'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?group_id=29581&release_id=234433'}, {'name': '20040501 Props 0.6.1 XSS and Remote File Viewing Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108342671616155&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1979?


Explain the CVE ID: What does the identifier CVE-2004-1980 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1980.

Directory traversal vulnerability in glossary.php in PROPS 0.6.1 allows remote attackers to view arbitrary files via a .. (dot dot) in (1) module or (2) format variables.


Provide references for further information: Can you share references or external links related to CVE-2004-1980?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?group_id=29581&release_id=234433'}, {'name': 'props-glossary-obtain-information(16036)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16036'}, {'name': '20040501 Props 0.6.1 XSS and Remote File Viewing Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108342671616155&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1980?


Explain the CVE ID: What does the identifier CVE-2004-1981 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1981.

The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the image file folder.


Provide references for further information: Can you share references or external links related to CVE-2004-1981?

{'name': '20040502 Crystal Reports Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108360413811017&w=2'}, {'name': '20040608 Vulnerability: Arbitrary File Access & DoS in Crystal Reports', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108671836127360&w=2'}, {'name': 'crystalreports-dos(16046)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16046'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1981?


Explain the CVE ID: What does the identifier CVE-2004-1982 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1982.

Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file via carriage return characters in the subject field.


Provide references for further information: Can you share references or external links related to CVE-2004-1982?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.yabbforum.com/community/YaBB.pl?board=general%3Baction=display%3Bnum=1093133233'}, {'name': 'yabb-subject-modify-file(16050)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16050'}, {'name': '12609', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12609'}, {'name': '10263', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10263'}, {'name': '20040502 Vulnerability in YaBB forum (Perl version without SQL)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108360430703935&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1982?


Explain the CVE ID: What does the identifier CVE-2004-1983 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1983.

The arch_get_unmapped_area function in mmap.c in the PaX patches for Linux kernel 2.6, when Address Space Layout Randomization (ASLR) is enabled, allows local users to cause a denial of service (infinite loop) via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2004-1983?

{'name': '20040509 PaX DoS proof-of-concept', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108420555920369&w=2'}, {'name': 'pax-aslr-enabled-dos(16037)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16037'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://pax.grsecurity.net/'}, {'name': '20040502 PaX Linux Kernel 2.6 Patches DoS Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108360001130312&w=2'}, {'name': 'GLSA-200407-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200407-02.xml'}, {'name': '10264', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10264'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1983?


Explain the CVE ID: What does the identifier CVE-2004-1984 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1984.

Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpinfo.php, (2) addpic.php, (3) config.php, (4) db_input.php, (5) displayecard.php, (6) ecard.php, (7) crop.inc.php, which reveal the full path in a PHP error message.


Provide references for further information: Can you share references or external links related to CVE-2004-1984?

{'name': '6495', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6495'}, {'name': '6500', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6500'}, {'name': '20040502 [waraxe-2004-SA#026 - Multiple vulnerabilities in Coppermine Photo Gallery for PhpNuke]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108360247732014&w=2'}, {'name': '5756', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5756'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/index.php?modname=sa&id=26'}, {'name': '6499', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6499'}, {'name': '1010001', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010001'}, {'name': '6497', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6497'}, {'name': '6498', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6498'}, {'name': '6496', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6496'}, {'name': 'coppermine-multiple-path-disclosure(16039)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16039'}, {'name': '11524', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11524'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1984?


Explain the CVE ID: What does the identifier CVE-2004-1985 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1985.

Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to inject arbitrary HTML or web script via the CPG_URL parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-1985?

{'name': '20040502 [waraxe-2004-SA#026 - Multiple vulnerabilities in Coppermine Photo Gallery for PhpNuke]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108360247732014&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/index.php?modname=sa&id=26'}, {'name': 'coppermine-menuincpho-xss(16040)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16040'}, {'name': '5757', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5757'}, {'name': '10253', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10253'}, {'name': '11524', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11524'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1985?


Explain the CVE ID: What does the identifier CVE-2004-1986 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1986.

Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in the startdir parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-1986?

{'name': 'coppermine-modulesphp-directory-traversal(16042)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16042'}, {'name': '20040502 [waraxe-2004-SA#026 - Multiple vulnerabilities in Coppermine Photo Gallery for PhpNuke]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108360247732014&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/index.php?modname=sa&id=26'}, {'name': '1010001', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010001'}, {'name': '5758', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5758'}, {'name': '10253', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10253'}, {'name': '11524', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11524'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1986?


Explain the CVE ID: What does the identifier CVE-2004-1987 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1987.

picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the (1) $CONFIG['impath'] or (2) $CONFIG['jpeg_qual'] parameters.


Provide references for further information: Can you share references or external links related to CVE-2004-1987?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/index.php?modname=sa&id=26'}, {'name': '1010001', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010001'}, {'name': '5759', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5759'}, {'name': '20040502  [waraxe-2004-SA#026 - Multiple vulnerabilities in Coppermine Photo Gallery for PhpNuke]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108360247732014&w=2'}, {'name': '10253', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10253'}, {'name': 'coppermine-parameters-execute-commands(16043)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16043'}, {'name': '11524', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11524'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1987?


Explain the CVE ID: What does the identifier CVE-2004-1988 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1988.

PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPG_M_DIR to reference a URL on a remote web server that contains functions.inc.php.


Provide references for further information: Can you share references or external links related to CVE-2004-1988?

{'name': '20040502 [waraxe-2004-SA#026 - Multiple vulnerabilities in Coppermine Photo Gallery for PhpNuke]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108360247732014&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/index.php?modname=sa&id=26'}, {'name': '1010001', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010001'}, {'name': 'coppermine-multiple-file-include(16041)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16041'}, {'name': '10253', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10253'}, {'name': '5761', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5761'}, {'name': '11524', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11524'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1988?


Explain the CVE ID: What does the identifier CVE-2004-1989 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1989.

PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEME_DIR parameter to reference a URL on a remote web server that contains user_list_info_box.inc.


Provide references for further information: Can you share references or external links related to CVE-2004-1989?

{'name': '20040502 [waraxe-2004-SA#026 - Multiple vulnerabilities in Coppermine Photo Gallery for PhpNuke]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108360247732014&w=2'}, {'name': '5912', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5912'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/index.php?modname=sa&id=26'}, {'name': '1010001', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010001'}, {'name': 'coppermine-multiple-file-include(16041)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16041'}, {'name': '10253', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10253'}, {'name': '11524', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11524'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1989?


Explain the CVE ID: What does the identifier CVE-2004-1990 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1990.

Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a malformed request.


Provide references for further information: Can you share references or external links related to CVE-2004-1990?

{'name': '10262', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10262'}, {'name': '20040503 Multible_Vulnerabilites_in_Aldos_Webserver', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108360629031227&w=2'}, {'name': '11542', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11542'}, {'name': '5880', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5880'}, {'name': 'aweb-path-disclosure(16047)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16047'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.oliverkarow.de/research/AldosWebserverMultipleVulns.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1990?


Explain the CVE ID: What does the identifier CVE-2004-1991 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1991.

Directory traversal vulnerability in Aldo's Web Server (aweb) 1.5 allows remote attackers to view arbitrary files via a .. (dot dot) in an HTTP GET request.


Provide references for further information: Can you share references or external links related to CVE-2004-1991?

{'name': '10262', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10262'}, {'name': '20040503 Multible_Vulnerabilites_in_Aldos_Webserver', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108360629031227&w=2'}, {'name': '11542', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11542'}, {'name': '5881', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5881'}, {'name': 'aweb-dotdot-directory-traversal(16048)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16048'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.oliverkarow.de/research/AldosWebserverMultipleVulns.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1991?


Explain the CVE ID: What does the identifier CVE-2004-1992 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1992.

Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service (crash) via a long -l parameter, which triggers an out-of-bounds read.


Provide references for further information: Can you share references or external links related to CVE-2004-1992?

{'name': '20040503 Serv-U LIST -l Parameter Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108360377119290&w=2'}, {'name': '5546', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5546'}, {'name': '10181', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10181'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/windowsntfocus/5ZP0G2KCKA.html'}, {'name': '11430', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11430'}, {'name': '20040503 Serv-U LIST -l Parameter Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=108359620108234&w=2'}, {'name': 'servu-list-command-bo(15913)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15913'}, {'name': '1009869', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009869'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1992?


Explain the CVE ID: What does the identifier CVE-2004-1993 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1993.

The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which allows remote attackers to execute arbitrary commands via shell metacharacters such as "`" (backticks) in the password.


Provide references for further information: Can you share references or external links related to CVE-2004-1993?

{'name': '10274', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10274'}, {'name': '20040504 remote root exec vulnerability in omail', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108377215015515&w=2'}, {'name': '9585', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/9585'}, {'name': 'omailwebmail-checklogin-code-execution(12948)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12948'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1993?


Explain the CVE ID: What does the identifier CVE-2004-1994 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1994.

FuseTalk 4.0 allows remote attackers to ban other users via a direct request to banning.cfm.


Provide references for further information: Can you share references or external links related to CVE-2004-1994?

{'name': '20040505 Fuse Talk Vunerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108377423825478&w=2'}, {'name': 'fusetalk-banning-unauth-access(16081)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16081'}, {'name': '11555', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11555'}, {'name': '5894', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5894'}, {'name': '10278', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10278'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1994?


Explain the CVE ID: What does the identifier CVE-2004-1995 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1995.

Cross-Site Request Forgery (CSRF) vulnerability in FuseTalk 2.0 allows remote attackers to create arbitrary accounts via a link to adduser.cfm.


Provide references for further information: Can you share references or external links related to CVE-2004-1995?

{'name': '20040505 Fuse Talk Vunerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108377423825478&w=2'}, {'name': '1010080', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010080'}, {'name': '10276', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10276'}, {'name': 'fusetalk-get-add-users(16080)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16080'}, {'name': '5895', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5895'}, {'name': '11555', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11555'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1995?


Explain the CVE ID: What does the identifier CVE-2004-1996 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1996.

Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.0 allows remote attackers to inject arbitrary web script via the size tag.


Provide references for further information: Can you share references or external links related to CVE-2004-1996?

{'name': '20040505 SMF SIZE Tag Script Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108377364615934&w=2'}, {'name': '10281', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10281'}, {'name': 'smf-size-html-injection(16067)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16067'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1996?


Explain the CVE ID: What does the identifier CVE-2004-1997 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1997.

Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2004-1997?

{'name': 'kolab-root-password-plaintext(16068)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16068'}, {'name': 'MDKSA-2004:052', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:052'}, {'name': 'OpenPKG-SA-2004.019', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://marc.info/?l=bugtraq&m=108377525924422&w=2'}, {'name': '10277', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10277'}, {'name': '11560', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11560'}, {'name': '5898', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5898'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.erfrakon.de/projects/kolab/download/kolab-server-1.0/src/Changelog'}, {'name': '[kolab-users] 20040420 Possible Kolab LDAP configuration information disclosure', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.kolab.org/pipermail/kolab-users/2004-April/000215.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1997?


Explain the CVE ID: What does the identifier CVE-2004-1998 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1998.

The Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to gain sensitive information via an invalid show parameter to modules.php, which reveals the full path in a PHP error message.


Provide references for further information: Can you share references or external links related to CVE-2004-1998?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/index.php?modname=sa&id=27'}, {'name': '20040505 [waraxe-2004-SA#027 - Once again - critical vulnerabilities in PhpNuke 6.x - 7.2]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108378804809891&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1998?


Explain the CVE ID: What does the identifier CVE-2004-1999 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1999.

Cross-site scripting (XSS) vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to inject arbitrary HTML and web script via the (1) ttitle or (2) sid parameters to modules.php.


Provide references for further information: Can you share references or external links related to CVE-2004-1999?

{'name': 'phpnuke-ttitle-sid-xss(16073)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16073'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/index.php?modname=sa&id=27'}, {'name': '11553', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11553'}, {'name': '20040505 [waraxe-2004-SA#027 - Once again - critical vulnerabilities in PhpNuke 6.x - 7.2]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108378804809891&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-1999?


Explain the CVE ID: What does the identifier CVE-2005-0001 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0001.

Race condition in the page fault handler (fault.c) for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to 2.6.10, when running on multiprocessor machines, allows local users to execute arbitrary code via concurrent threads that share the same virtual memory space and simultaneously request stack expansion.


Provide references for further information: Can you share references or external links related to CVE-2005-0001?

{'name': '20163', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20163'}, {'name': '13822', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13822'}, {'name': 'DSA-1082', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1082'}, {'name': 'MDKSA-2005:022', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:022'}, {'name': 'RHSA-2005:017', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-017.html'}, {'name': 'FLSA:2336', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2336'}, {'name': '20050112 Linux kernel i386 SMP page fault handler privilege escalation', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110554694522719&w=2'}, {'name': 'oval:org.mitre.oval:def:10322', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10322'}, {'name': 'DSA-1070', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1070'}, {'name': 'RHSA-2005:016', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-016.html'}, {'name': 'RHSA-2005:043', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-043.html'}, {'name': '2005-0001', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2005/0001/'}, {'name': 'RHSA-2005:092', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-092.html'}, {'name': 'linux-fault-handler-gain-privileges(18849)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18849'}, {'name': 'DSA-1067', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1067'}, {'name': 'DSA-1069', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1069'}, {'name': 'CLA-2005:930', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930'}, {'name': '20050114 [USN-60-0] Linux kernel vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110581146702951&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://isec.pl/vulnerabilities/isec-0022-pagefault.txt'}, {'name': '20050112 Linux kernel i386 SMP page fault handler privilege escalation', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030826.html'}, {'name': '20202', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20202'}, {'name': '12244', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12244'}, {'name': '20338', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20338'}, {'name': '1012862', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012862'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0001?


Explain the CVE ID: What does the identifier CVE-2005-0002 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0002.

poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users.


Provide references for further information: Can you share references or external links related to CVE-2005-0002?

{'name': '13865', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13865'}, {'name': 'GLSA-200501-22', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200501-22.xml'}, {'name': '1012840', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012840'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0002?


Explain the CVE ID: What does the identifier CVE-2005-0003 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0003.

The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file.


Provide references for further information: Can you share references or external links related to CVE-2005-0003?

{'name': '20163', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20163'}, {'name': 'DSA-1082', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1082'}, {'name': 'MDKSA-2005:022', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:022'}, {'name': 'SUSE-SA:2005:018', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_18_kernel.html'}, {'name': 'RHSA-2005:017', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-017.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://linux.bkbits.net:8080/linux-2.4/cset%4041c36fb6q1Z68WUzKQFjJR-40Ev3tw'}, {'name': 'DSA-1070', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1070'}, {'name': 'linux-vma-gain-privileges(18886)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18886'}, {'name': 'RHSA-2005:043', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-043.html'}, {'name': '2005-0001', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2005/0001/'}, {'name': '12261', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12261'}, {'name': 'oval:org.mitre.oval:def:9512', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9512'}, {'name': 'DSA-1067', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1067'}, {'name': 'DSA-1069', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1069'}, {'name': '1012885', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012885'}, {'tags': ['x_refsource_MISC'], 'url': 'http://linux.bkbits.net:8080/linux-2.6/cset%4041a6721cce-LoPqkzKXudYby_3TUmg'}, {'name': '20202', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20202'}, {'name': '20338', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20338'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0003?


Explain the CVE ID: What does the identifier CVE-2005-0004 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0004.

The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2005-0004?

{'name': 'CLA-2005:947', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947'}, {'name': 'DSA-647', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-647'}, {'name': 'MDKSA-2005:036', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:036'}, {'name': '101864', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1'}, {'name': '20050118 [USN-63-1] MySQL client vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110608297217224&w=2'}, {'name': '13867', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13867'}, {'name': '12277', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12277'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.mysql.com/internals/20600'}, {'name': 'mysql-mysqlaccess-symlink(18922)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18922'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0004?


Explain the CVE ID: What does the identifier CVE-2005-0005 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0005.

Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers.


Provide references for further information: Can you share references or external links related to CVE-2005-0005?

{'name': 'oval:org.mitre.oval:def:9925', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9925'}, {'name': 'DSA-646', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-646'}, {'name': 'GLSA-200501-37', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-37.xml'}, {'name': '20050118 [USN-62-1] imagemagick vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110608222117215&w=2'}, {'name': '20050117 Multiple Vendor ImageMagick .psd Image File Decode Heap Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=184&type=vulnerabilities'}, {'name': 'RHSA-2005:071', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-071.html'}, {'name': 'RHSA-2005:070', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-070.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0005?


Explain the CVE ID: What does the identifier CVE-2005-0006 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0006.

The COPS dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (infinite loop).


Provide references for further information: Can you share references or external links related to CVE-2005-0006?

{'name': '12326', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12326'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00017.html'}, {'name': 'RHSA-2005:037', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-037.html'}, {'name': '13946', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13946/'}, {'name': 'RHSA-2005:011', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-011.html'}, {'name': 'oval:org.mitre.oval:def:10801', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10801'}, {'name': 'ethereal-cops-dos(18999)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18999'}, {'name': 'GLSA-200501-27', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml'}, {'name': 'P-106', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-106.shtml'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'MDKSA-2005:013', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:013'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0006?


Explain the CVE ID: What does the identifier CVE-2005-0007 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0007.

Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash from assertion).


Provide references for further information: Can you share references or external links related to CVE-2005-0007?

{'name': '12326', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12326'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00017.html'}, {'name': 'oval:org.mitre.oval:def:11381', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11381'}, {'name': 'RHSA-2005:037', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-037.html'}, {'name': '13946', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13946/'}, {'name': 'RHSA-2005:011', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-011.html'}, {'name': 'GLSA-200501-27', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml'}, {'name': 'P-106', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-106.shtml'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'MDKSA-2005:013', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:013'}, {'name': 'ethereal-dlsw-dos(19000)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19000'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0007?


Explain the CVE ID: What does the identifier CVE-2005-0008 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0008.

Unknown vulnerability in the DNP dissector in Ethereal 0.10.5 through 0.10.8 allows remote attackers to cause "memory corruption."


Provide references for further information: Can you share references or external links related to CVE-2005-0008?

{'name': '12326', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12326'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00017.html'}, {'name': 'RHSA-2005:037', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-037.html'}, {'name': '13946', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13946/'}, {'name': 'RHSA-2005:011', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-011.html'}, {'name': 'ethereal-dnp-memory-corruption(19001)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19001'}, {'name': 'GLSA-200501-27', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml'}, {'name': 'P-106', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-106.shtml'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'MDKSA-2005:013', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:013'}, {'name': 'oval:org.mitre.oval:def:10689', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10689'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0008?


Explain the CVE ID: What does the identifier CVE-2005-0009 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0009.

Unknown vulnerability in the Gnutella dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash).


Provide references for further information: Can you share references or external links related to CVE-2005-0009?

{'name': 'ethereal-gnutella-dos(19002)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19002'}, {'name': '12326', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12326'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00017.html'}, {'name': 'RHSA-2005:037', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-037.html'}, {'name': '13946', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13946/'}, {'name': 'RHSA-2005:011', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-011.html'}, {'name': 'GLSA-200501-27', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml'}, {'name': 'P-106', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-106.shtml'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'MDKSA-2005:013', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:013'}, {'name': 'oval:org.mitre.oval:def:10623', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10623'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0009?


Explain the CVE ID: What does the identifier CVE-2005-0010 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0010.

Unknown vulnerability in the MMSE dissector in Ethereal 0.10.4 through 0.10.8 allows remote attackers to cause a denial of service by triggering a free of statically allocated memory.


Provide references for further information: Can you share references or external links related to CVE-2005-0010?

{'name': '12326', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12326'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00017.html'}, {'name': 'RHSA-2005:037', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-037.html'}, {'name': '13946', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13946/'}, {'name': 'RHSA-2005:011', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-011.html'}, {'name': 'ethereal-mmse-free-memory(19003)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19003'}, {'name': 'oval:org.mitre.oval:def:9521', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9521'}, {'name': 'GLSA-200501-27', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-27.xml'}, {'name': 'P-106', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-106.shtml'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'MDKSA-2005:013', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:013'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0010?


Explain the CVE ID: What does the identifier CVE-2005-0011 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0011.

Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Interface (INDI) in KDE 3.3 to 3.3.2, allow local users and remote attackers to execute arbitrary code via stack-based buffer overflows.


Provide references for further information: Can you share references or external links related to CVE-2005-0011?

{'name': 'FEDORA-2005-148', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-announce-list/2005-February/msg00044.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20050215-1.txt'}, {'name': 'GLSA-200502-23', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-23.xml'}, {'name': '14306', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14306'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0011?


Explain the CVE ID: What does the identifier CVE-2005-0012 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0012.

Format string vulnerability in the a_Interface_msg function in Dillo before 0.8.3-r4 allows remote attackers to execute arbitrary code via format string specifiers in a web page.


Provide references for further information: Can you share references or external links related to CVE-2005-0012?

{'name': 'GLSA-200501-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-11.xml'}, {'name': '13760', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13760/'}, {'name': '12203', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12203'}, {'name': 'dillo-capi-format-string(18807)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18807'}, {'name': '13764', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13764'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0012?


Explain the CVE ID: What does the identifier CVE-2005-0013 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0013.

nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2005-0013?

{'name': 'DSA-665', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-665'}, {'name': '13297', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/13297'}, {'name': 'FLSA:152904', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/433927/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://platan.vc.cvut.cz/pub/linux/ncpfs/Changes-2.2.6'}, {'name': 'MDKSA-2005:028', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:028'}, {'name': '12400', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12400'}, {'name': '1013019', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013019'}, {'name': 'GLSA-200501-44', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-44.xml'}, {'name': 'RHSA-2005:371', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-371.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0013?


Explain the CVE ID: What does the identifier CVE-2005-0014 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0014.

Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client.


Provide references for further information: Can you share references or external links related to CVE-2005-0014?

{'name': 'FLSA:152904', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/433927/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://platan.vc.cvut.cz/pub/linux/ncpfs/Changes-2.2.6'}, {'name': 'MDKSA-2005:028', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:028'}, {'name': '12400', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12400'}, {'name': '1013019', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013019'}, {'name': 'GLSA-200501-44', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-44.xml'}, {'name': '13298', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/13298'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0014?


Explain the CVE ID: What does the identifier CVE-2005-0015 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0015.

diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.


Provide references for further information: Can you share references or external links related to CVE-2005-0015?

{'name': 'DSA-650', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-650'}, {'name': '1012955', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012955'}, {'name': '13897', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13897'}, {'name': '13941', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13941'}, {'name': 'sword-diatheke-command-execution(18997)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18997'}, {'name': '12320', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12320'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0015?


Explain the CVE ID: What does the identifier CVE-2005-0016 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0016.

Buffer overflow in the exported_display function in xatitv in gatos before 0.0.5 allows local users to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2005-0016?

{'name': 'gatos-xatitv-bo(18930)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18930'}, {'name': '13884', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13884/'}, {'name': 'DSA-640', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-640'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0016?


Explain the CVE ID: What does the identifier CVE-2005-0017 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0017.

The f2c translator in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2005-0017?

{'name': '14067', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14067'}, {'name': 'DSA-661', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-661'}, {'name': '1013028', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013028'}, {'name': '12380', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12380'}, {'name': 'GLSA-200501-43', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-43.xml'}, {'name': '14041', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14041'}, {'name': '14052', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14052'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0017?


Explain the CVE ID: What does the identifier CVE-2005-0018 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0018.

The f2 shell script in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2005-0018?

{'name': 'DSA-661', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-661'}, {'name': '1013028', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013028'}, {'name': '12380', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12380'}, {'name': '14041', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14041'}, {'name': '14052', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14052'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0018?


Explain the CVE ID: What does the identifier CVE-2005-0019 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0019.

Unknown vulnerability in hztty 2.0 and earlier allows local users to execute arbitrary commands.


Provide references for further information: Can you share references or external links related to CVE-2005-0019?

{'name': '14236', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14236'}, {'name': '12518', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12518'}, {'name': 'DSA-675', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-675'}, {'name': 'hztty-command-execution(19297)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19297'}, {'name': '1013154', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013154'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0019?


Explain the CVE ID: What does the identifier CVE-2005-0020 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0020.

Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2005-0020?

{'name': 'MDKSA-2005:010', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:010'}, {'name': '13828', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13828'}, {'name': '1012957', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012957'}, {'name': '12274', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12274'}, {'name': '13898', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13898'}, {'name': 'playmidi-bo(18933)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18933'}, {'name': 'DSA-641', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-641'}, {'name': '13890', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13890'}, {'name': '13049', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/13049'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0020?


Explain the CVE ID: What does the identifier CVE-2005-0021 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0021.

Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function.


Provide references for further information: Can you share references or external links related to CVE-2005-0021?

{'name': '20050107 Exim host_aton() Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=179&type=vulnerabilities'}, {'name': 'VU#132992', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/132992'}, {'name': 'DSA-635', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-635'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44'}, {'name': 'DSA-637', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-637'}, {'name': '20050114 Exim dns_buld_reverse() Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=183&type=vulnerabilities'}, {'name': 'RHSA-2005:025', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-025.html'}, {'name': 'GLSA-200501-23', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200501-23.xml'}, {'name': '[exim] 20050104 2 smallish security issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html'}, {'name': 'oval:org.mitre.oval:def:10347', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10347'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0021?


Explain the CVE ID: What does the identifier CVE-2005-0022 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0022.

Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_spa_client function, may allow attackers to execute arbitrary code during SPA authentication.


Provide references for further information: Can you share references or external links related to CVE-2005-0022?

{'name': 'oval:org.mitre.oval:def:11293', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11293'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44'}, {'name': '20050212 exim auth_spa_server() PoC exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110824870908614&w=2'}, {'name': '12188', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12188'}, {'name': 'RHSA-2005:025', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-025.html'}, {'name': '20050107 Exim auth_spa_server() Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=178&type=vulnerabilities'}, {'name': 'GLSA-200501-23', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200501-23.xml'}, {'name': '[exim] 20050104 2 smallish security issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0022?


Explain the CVE ID: What does the identifier CVE-2005-0023 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0023.

gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed.


Provide references for further information: Can you share references or external links related to CVE-2005-0023?

{'name': 'ADV-2005-1931', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/1931'}, {'name': '20051007 gnome-pty-helper writes arbitrary utmp records', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=112879572407250&w=2'}, {'name': '15004', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/15004'}, {'name': 'libzvt-gnomeptyhelper-spoof(22496)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/22496'}, {'name': '17023', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17023'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330907'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.gnome.org/show_bug.cgi?id=317312'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0023?


Explain the CVE ID: What does the identifier CVE-2005-0033 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0033.

Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service (crash) via queries that trigger the overflow in the q_usedns array that tracks nameservers and addresses.


Provide references for further information: Can you share references or external links related to CVE-2005-0033?

{'name': '1012996', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012996'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.uniras.gov.uk/niscc/docs/al-20050125-00059.html'}, {'name': 'VU#327633', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/327633'}, {'name': '14009', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14009'}, {'name': '12364', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12364'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.isc.org/index.pl?/sw/bind/bind8.php'}, {'name': 'SCOSA-2006.1', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.1/SCOSA-2006.1.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.isc.org/index.pl?/sw/bind/bind-security.php'}, {'name': '18291', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18291'}, {'name': 'bind-qusedns-bo(19063)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19063'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0033?


Explain the CVE ID: What does the identifier CVE-2005-0034 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0034.

An "incorrect assumption" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows remote attackers to cause a denial of service (named server exit) via crafted DNS packets that cause an internal consistency test (self-check) to fail.


Provide references for further information: Can you share references or external links related to CVE-2005-0034?

{'name': '2005-0003', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2005/0003/'}, {'name': '12365', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12365'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.isc.org/index.pl?/sw/bind/bind9.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.uniras.gov.uk/niscc/docs/al-20050125-00060.html'}, {'name': '14008', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14008'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.isc.org/index.pl?/sw/bind/bind-security.php'}, {'name': 'VU#938617', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/938617'}, {'name': '1012995', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012995'}, {'name': 'bind-named-dns-dos(19062)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19062'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0034?


Explain the CVE ID: What does the identifier CVE-2005-0035 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0035.

The Acrobat web control in Adobe Acrobat and Acrobat Reader 7.0 and earlier, when used with Internet Explorer, allows remote attackers to determine the existence of arbitrary files via the LoadFile ActiveX method.


Provide references for further information: Can you share references or external links related to CVE-2005-0035?

{'name': '14813', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14813'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/331465.html'}, {'name': '12989', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12989'}, {'name': '15242', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15242'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hyperdose.com/advisories/H2005-06.txt'}, {'name': 'ADV-2005-0310', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0310'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.niscc.gov.uk/niscc/docs/re-20050401-00264.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0035?


Explain the CVE ID: What does the identifier CVE-2005-0036 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0036.

The DNS implementation in DeleGate 8.10.2 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.


Provide references for further information: Can you share references or external links related to CVE-2005-0036?

{'name': '13729', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13729'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en'}, {'name': '25291', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/25291'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0036?


Explain the CVE ID: What does the identifier CVE-2005-0037 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0037.

The DNS implementation of DNRD before 2.10 allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.


Provide references for further information: Can you share references or external links related to CVE-2005-0037?


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0037?


Explain the CVE ID: What does the identifier CVE-2005-0038 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0038.

The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.


Provide references for further information: Can you share references or external links related to CVE-2005-0038?


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0038?


Explain the CVE ID: What does the identifier CVE-2005-0039 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0039.

Certain configurations of IPsec, when using Encapsulating Security Payload (ESP) in tunnel mode, integrity protection at a higher layer, or Authentication Header (AH), allow remote attackers to decrypt IPSec communications by modifying the outer packet in ways that cause plaintext data from the inner packet to be returned in ICMP messages, as demonstrated using bit-flipping attacks and (1) Destination Address Rewriting, (2) a modified header length that causes portions of the packet to be interpreted as IP Options, or (3) a modified protocol field and source address.


Provide references for further information: Can you share references or external links related to CVE-2005-0039?

{'name': 'HPSBTU01217', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/407774'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.niscc.gov.uk/niscc/docs/al-20050509-00386.html?lang=en'}, {'name': '20050509 NISCC Vulnerability Advisory IPSEC - 004033', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111566201610350&w=2'}, {'name': 'SSRT5957', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/407774'}, {'name': 'ADV-2005-2806', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/2806'}, {'name': '13562', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13562'}, {'name': '17938', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17938'}, {'name': 'ADV-2005-0507', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0507'}, {'name': '1015320', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015320'}, {'name': 'VU#302220', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/302220'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0039?


Explain the CVE ID: What does the identifier CVE-2005-0040 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0040.

Multiple cross-site scripting (XSS) vulnerabilities in DotNetNuke before 3.0.12 allow remote attackers to inject arbitrary web script or HTML via the (1) register a new user page, (2) User-Agent, or (3) Username, which is not properly quoted before sending to the error log.


Provide references for further information: Can you share references or external links related to CVE-2005-0040?

{'name': '15397', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15397'}, {'name': '13644', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13644'}, {'name': '13646', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13646'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.woany.co.uk/advisories/dotnetnukexss.txt'}, {'name': '20050516 DotNetNuke (Multiple XSS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111627180518591&w=2'}, {'name': '13647', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13647'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0040?


Explain the CVE ID: What does the identifier CVE-2005-0043 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0043.

Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.


Provide references for further information: Can you share references or external links related to CVE-2005-0043?

{'name': 'VU#377368', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/377368'}, {'name': '1012839', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012839'}, {'name': 'itunes-m3u-pls-bo(18851)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18851'}, {'name': '13804', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13804'}, {'name': '20050113 Apple iTunes Playlist Parsing Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=180&type=vulnerabilities'}, {'name': 'APPLE-SA-2005-01-11', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Jan/msg00000.html'}, {'name': '12833', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/12833'}, {'name': '12238', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12238'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0043?


Explain the CVE ID: What does the identifier CVE-2005-0044 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0044.

The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the "Input Validation Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2005-0044?

{'name': 'oval:org.mitre.oval:def:2917', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2917'}, {'name': 'win-ole-code-execution(19109)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19109'}, {'name': 'oval:org.mitre.oval:def:1180', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1180'}, {'name': 'VU#927889', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/927889'}, {'name': 'TA05-039A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA05-039A.html'}, {'name': 'oval:org.mitre.oval:def:3568', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3568'}, {'name': 'MS05-012', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-012'}, {'name': 'oval:org.mitre.oval:def:4499', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4499'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0044?


Explain the CVE ID: What does the identifier CVE-2005-0045 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0045.

The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the "Server Message Block Vulnerability," and as demonstrated using Trans2 FIND_FIRST2 responses with large file name length fields.


Provide references for further information: Can you share references or external links related to CVE-2005-0045?

{'name': '20050209 EEYE: Windows SMB Client Transaction Response Handling Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110792638401852&w=2'}, {'name': 'oval:org.mitre.oval:def:4043', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4043'}, {'name': 'win-smb-code-execution(19089)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19089'}, {'name': '20050209 EEYE: Windows SMB Client Transaction Response Handling Vulnerability', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=110795643831169&w=2'}, {'name': 'oval:org.mitre.oval:def:1606', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1606'}, {'name': '12484', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12484'}, {'name': 'TA05-039A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA05-039A.html'}, {'name': 'oval:org.mitre.oval:def:1889', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1889'}, {'name': 'VU#652537', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/652537'}, {'name': 'oval:org.mitre.oval:def:1847', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1847'}, {'name': '20050309 Update: MS05-011 EEYE: Windows SMB Client Transaction Response Handling Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111040962600205&w=2'}, {'name': 'MS05-011', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-011'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0045?


Explain the CVE ID: What does the identifier CVE-2005-0047 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0047.

Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows attackers to execute arbitrary code, aka the "COM Structured Storage Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2005-0047?

{'name': 'oval:org.mitre.oval:def:901', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A901'}, {'name': 'oval:org.mitre.oval:def:1159', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1159'}, {'name': 'TA05-039A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA05-039A.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.argeniss.com/research/SSExploit.c'}, {'name': 'MS05-012', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-012'}, {'name': '20050530 [Argeniss] MS05-012 Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111755870828817&w=2'}, {'name': 'oval:org.mitre.oval:def:2351', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2351'}, {'name': 'win-com-gain-privileges(19105)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19105'}, {'name': 'VU#597889', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/597889'}, {'name': 'oval:org.mitre.oval:def:2892', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2892'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0047?


Explain the CVE ID: What does the identifier CVE-2005-0048 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0048.

Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the "IP Validation Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2005-0048?

{'name': 'oval:org.mitre.oval:def:3824', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3824'}, {'name': 'oval:org.mitre.oval:def:1744', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1744'}, {'name': 'VU#233754', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/233754'}, {'name': 'MS05-019', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019'}, {'name': 'oval:org.mitre.oval:def:4549', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4549'}, {'name': '20050412 Windows IP Options Remote Compromise', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/xforce/alerts/id/192'}, {'name': 'TA05-102A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA05-102A.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0048?


Explain the CVE ID: What does the identifier CVE-2005-0049 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0049.

Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows remote attackers to inject arbitrary HTML and web script via a cross-site scripting (XSS) attack, or to spoof the web cache.


Provide references for further information: Can you share references or external links related to CVE-2005-0049?

{'name': 'win-sharepoint-services-xss(19091)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19091'}, {'name': 'VU#340409', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/340409'}, {'name': 'TA05-039A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA05-039A.html'}, {'name': 'MS05-006', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-006'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0049?


Explain the CVE ID: What does the identifier CVE-2005-0050 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0050.

The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an "unchecked buffer" and allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, aka the "License Logging Service Vulnerability."