Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0891.

Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.


Provide references for further information: Can you share references or external links related to CVE-2004-0891?

{'name': 'gaim-msn-slp-dos(17787)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17787'}, {'name': 'FLSA:2188', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2188'}, {'name': 'GLSA-200410-23', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200410-23.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gaim.sourceforge.net/security/?id=9'}, {'name': 'oval:org.mitre.oval:def:11790', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11790'}, {'name': 'USN-8-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-8-1/'}, {'name': 'gaim-file-transfer-dos(17790)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17790'}, {'name': 'RHSA-2004:604', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-604.html'}, {'name': 'gaim-msn-slp-bo(17786)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17786'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0891?


Explain the CVE ID: What does the identifier CVE-2004-0892 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0892.

Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.


Provide references for further information: Can you share references or external links related to CVE-2004-0892?

{'name': 'oval:org.mitre.oval:def:4264', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4264'}, {'name': 'oval:org.mitre.oval:def:4859', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4859'}, {'name': 'isa-cache-reverse-spoof(17906)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17906'}, {'name': '11605', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11605'}, {'name': 'MS04-039', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-039'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0892?


Explain the CVE ID: What does the identifier CVE-2004-0893 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0893.

The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the lengths of messages sent to the LPC port, which allows local users to gain privileges, aka "Windows Kernel Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2004-0893?

{'name': 'oval:org.mitre.oval:def:1561', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1561'}, {'name': 'oval:org.mitre.oval:def:4021', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4021'}, {'name': 'oval:org.mitre.oval:def:1581', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1581'}, {'name': 'oval:org.mitre.oval:def:1886', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1886'}, {'name': 'oval:org.mitre.oval:def:450', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A450'}, {'name': 'MS04-044', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-044'}, {'name': 'win-kernel-lpc-gain-privileges(18339)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18339'}, {'name': 'oval:org.mitre.oval:def:1321', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1321'}, {'name': 'oval:org.mitre.oval:def:2008', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2008'}, {'name': 'oval:org.mitre.oval:def:4458', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4458'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0893?


Explain the CVE ID: What does the identifier CVE-2004-0894 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0894.

LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly validate connection information, which allows local users to gain privileges via a specially-designed program.


Provide references for further information: Can you share references or external links related to CVE-2004-0894?

{'name': 'oval:org.mitre.oval:def:4368', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4368'}, {'name': 'oval:org.mitre.oval:def:2062', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2062'}, {'name': 'oval:org.mitre.oval:def:3312', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3312'}, {'name': 'win-lsass-gain-privileges(18340)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18340'}, {'name': 'oval:org.mitre.oval:def:778', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A778'}, {'name': 'MS04-044', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-044'}, {'name': 'oval:org.mitre.oval:def:3325', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3325'}, {'name': 'oval:org.mitre.oval:def:1888', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1888'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0894?


Explain the CVE ID: What does the identifier CVE-2004-0897 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0897.

The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.


Provide references for further information: Can you share references or external links related to CVE-2004-0897?

{'name': '13802', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13802'}, {'name': 'P-095', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-095.shtml'}, {'name': '12228', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12228'}, {'name': 'VU#657118', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/657118'}, {'name': 'MS05-003', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-003'}, {'name': 'oval:org.mitre.oval:def:2447', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2447'}, {'name': '1012833', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1012833'}, {'name': 'oval:org.mitre.oval:def:2128', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2128'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0897?


Explain the CVE ID: What does the identifier CVE-2004-0899 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0899.

The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service (application crash) via a malformed DHCP message, aka "Logging Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2004-0899?

{'name': 'winnt-dhcp-machinename-dos(18341)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18341'}, {'name': 'oval:org.mitre.oval:def:4282', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4282'}, {'name': 'oval:org.mitre.oval:def:2280', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2280'}, {'name': 'MS04-042', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-042'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0899?


Explain the CVE ID: What does the identifier CVE-2004-0900 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0900.

The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2004-0900?

{'name': 'oval:org.mitre.oval:def:3577', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3577'}, {'name': 'oval:org.mitre.oval:def:4846', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4846'}, {'name': 'MS04-042', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-042'}, {'name': 'winnt-dhcp-hardwareaddress-code-execution(18342)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18342'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0900?


Explain the CVE ID: What does the identifier CVE-2004-0901 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0901.

Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different vulnerability than CVE-2004-0571.


Provide references for further information: Can you share references or external links related to CVE-2004-0901?

{'name': 'oval:org.mitre.oval:def:4076', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4076'}, {'name': 'oval:org.mitre.oval:def:4576', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4576'}, {'name': 'P-055', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-055.shtml'}, {'name': 'oval:org.mitre.oval:def:3882', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3882'}, {'name': 'oval:org.mitre.oval:def:1241', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1241'}, {'name': 'oval:org.mitre.oval:def:539', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A539'}, {'name': 'oval:org.mitre.oval:def:1655', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1655'}, {'name': 'MS04-041', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-041'}, {'name': '20041214 Microsoft Word 6.0/95 Document Converter Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=162&type=vulnerabilities&flashstatus=true'}, {'name': 'win-converter-font-code-execution(18338)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18338'}, {'name': 'oval:org.mitre.oval:def:4749', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4749'}, {'name': 'oval:org.mitre.oval:def:3310', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3310'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0901?


Explain the CVE ID: What does the identifier CVE-2004-0902 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0902.

Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname.


Provide references for further information: Can you share references or external links related to CVE-2004-0902?

{'name': 'oval:org.mitre.oval:def:11201', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11201'}, {'name': 'SUSE-SA:2004:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_36_mozilla.html'}, {'name': 'FLSA:2089', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=109900315219363&w=2'}, {'name': 'mozilla-nspop3protocol-bo(17379)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17379'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=256316'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=245066'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=226669'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=258005'}, {'name': 'mozilla-netscape-nonascii-bo(17378)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17378'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3'}, {'name': 'GLSA-200409-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-26.xml'}, {'name': 'TA04-261A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-261A.html'}, {'name': 'SSRT4826', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=109698896104418&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0902?


Explain the CVE ID: What does the identifier CVE-2004-0903 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0903.

Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message.


Provide references for further information: Can you share references or external links related to CVE-2004-0903?

{'name': 'SUSE-SA:2004:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_36_mozilla.html'}, {'name': 'mozilla-netscape-nsvcardobj-bo(17380)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17380'}, {'name': 'FLSA:2089', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=109900315219363&w=2'}, {'name': 'VU#414240', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/414240'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=257314'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3'}, {'name': 'GLSA-200409-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-26.xml'}, {'name': '11174', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11174'}, {'name': 'oval:org.mitre.oval:def:10873', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10873'}, {'name': 'TA04-261A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-261A.html'}, {'name': 'SSRT4826', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=109698896104418&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0903?


Explain the CVE ID: What does the identifier CVE-2004-0904 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0904.

Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.


Provide references for further information: Can you share references or external links related to CVE-2004-0904?

{'name': 'mozilla-netscape-bmp-bo(17381)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17381'}, {'name': 'SUSE-SA:2004:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_36_mozilla.html'}, {'name': 'FLSA:2089', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=109900315219363&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=255067'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3'}, {'name': 'GLSA-200409-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-26.xml'}, {'name': '11171', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11171'}, {'name': 'TA04-261A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-261A.html'}, {'name': 'SSRT4826', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=109698896104418&w=2'}, {'name': 'oval:org.mitre.oval:def:10952', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10952'}, {'name': 'VU#847200', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/847200'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0904?


Explain the CVE ID: What does the identifier CVE-2004-0905 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0905.

Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in another domain.


Provide references for further information: Can you share references or external links related to CVE-2004-0905?

{'name': 'VU#651928', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/651928'}, {'name': 'SUSE-SA:2004:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_36_mozilla.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=250862'}, {'name': 'FLSA:2089', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=109900315219363&w=2'}, {'name': 'oval:org.mitre.oval:def:10378', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10378'}, {'name': '11177', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11177'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3'}, {'name': 'GLSA-200409-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-26.xml'}, {'name': 'mozilla-netscape-sameorigin-bypass(17374)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17374'}, {'name': 'TA04-261A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-261A.html'}, {'name': 'SSRT4826', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=109698896104418&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0905?


Explain the CVE ID: What does the identifier CVE-2004-0906 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0906.

The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0906?

{'name': 'RHSA-2005:323', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-323.html'}, {'name': 'mozilla-insecure-file-permissions(17375)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17375'}, {'name': '11192', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11192'}, {'name': 'SUSE-SA:2004:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_36_mozilla.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=231083'}, {'name': 'oval:org.mitre.oval:def:11668', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11668'}, {'name': 'VU#653160', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/653160'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3'}, {'name': 'GLSA-200409-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-26.xml'}, {'name': '12526', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12526/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=235781'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0906?


Explain the CVE ID: What does the identifier CVE-2004-0907 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0907.

The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8, create certain files with insecure permissions, which could allow local users to overwrite those files and execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0907?

{'name': 'mozilla-tar-insecure-permissions(17373)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17373'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=254303'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3'}, {'name': 'GLSA-200409-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-26.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0907?


Explain the CVE ID: What does the identifier CVE-2004-0908 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0908.

Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.


Provide references for further information: Can you share references or external links related to CVE-2004-0908?

{'name': '11179', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11179'}, {'name': 'VU#460528', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/460528'}, {'name': 'SUSE-SA:2004:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_36_mozilla.html'}, {'name': 'FLSA:2089', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=bugtraq&m=109900315219363&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=257523'}, {'name': 'oval:org.mitre.oval:def:9745', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9745'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3'}, {'name': 'GLSA-200409-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-26.xml'}, {'name': 'mozilla-shortcut-clipboard-access(17376)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17376'}, {'name': 'SSRT4826', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=109698896104418&w=2'}, {'name': '12526', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12526'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0908?


Explain the CVE ID: What does the identifier CVE-2004-0909 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0909.

Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users into performing unexpected actions, including installing software, via signed scripts that request enhanced abilities using the enablePrivilege parameter, then modify the meaning of certain security-relevant dialog messages.


Provide references for further information: Can you share references or external links related to CVE-2004-0909?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=253942'}, {'name': 'SUSE-SA:2004:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_36_mozilla.html'}, {'name': 'VU#113192', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/113192'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3'}, {'name': 'GLSA-200409-26', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-26.xml'}, {'name': 'mozilla-enableprivilege-modify-dialog(17377)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17377'}, {'name': 'SSRT4826', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=109698896104418&w=2'}, {'name': '12526', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12526'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0909?


Explain the CVE ID: What does the identifier CVE-2004-0910 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0910.


Provide references for further information: Can you share references or external links related to CVE-2004-0910?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0910?


Explain the CVE ID: What does the identifier CVE-2004-0911 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0911.

telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a denial of service (free of an invalid pointer), a different vulnerability than CVE-2001-0554.


Provide references for further information: Can you share references or external links related to CVE-2004-0911?

{'name': '20040918 Debian netkit telnetd vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/375743'}, {'name': 'DSA-556', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-556'}, {'name': 'telnetd-netkit-bo(17540)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17540'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=273694'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0911?


Explain the CVE ID: What does the identifier CVE-2004-0913 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0913.

Unknown vulnerability in ecartis 0.x before 0.129a+1.0.0-snap20020514-1.3 and 1.x before 1.0.0+cvs.20030911-8 allows attackers in the same domain to gain administrator privileges and modify configuration.


Provide references for further information: Can you share references or external links related to CVE-2004-0913?

{'name': 'ecartis-gain-privileges(17809)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17809'}, {'name': '11487', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11487'}, {'name': 'DSA-572', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-572'}, {'name': 'ESB-2004.0669', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4491'}, {'name': '12918', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12918/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0913?


Explain the CVE ID: What does the identifier CVE-2004-0914 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0914.

Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions.


Provide references for further information: Can you share references or external links related to CVE-2004-0914?

{'name': 'RHSA-2005:004', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-004.html'}, {'name': 'libxpm-directory-traversal(18146)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18146'}, {'name': 'USN-83-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-83-1'}, {'name': 'RHSA-2004:537', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2004-537.html'}, {'name': 'libxpm-image-bo(18142)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18142'}, {'name': '13224', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13224/'}, {'name': 'oval:org.mitre.oval:def:9943', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9943'}, {'name': 'FEDORA-2004-433', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.linuxsecurity.com/content/view/106877/102/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/pub/X11R6.8.1/patches/README.xorg-681-CAN-2004-0914.patch'}, {'name': 'RHSA-2004:610', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-610.html'}, {'name': 'libxpm-improper-memory-access(18144)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18144'}, {'name': 'GLSA-200502-07', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-07.xml'}, {'name': 'FLSA-2006:152803', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html'}, {'name': 'DSA-607', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-607'}, {'name': '11694', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11694'}, {'name': 'GLSA-200502-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-06.xml'}, {'name': 'USN-83-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-83-2'}, {'name': 'HPSBTU01228', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTU01228'}, {'name': 'MDKSA-2004:137', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:137'}, {'name': 'GLSA-200411-28', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-28.xml'}, {'name': 'libxpm-dos(18147)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18147'}, {'name': 'libxpm-command-execution(18145)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18145'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0914?


Explain the CVE ID: What does the identifier CVE-2004-0915 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0915.

Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hide_cvsroot and forbidden settings, which could allow remote attackers to gain sensitive information.


Provide references for further information: Can you share references or external links related to CVE-2004-0915?

{'name': 'DSA-605', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-605'}, {'name': 'viewcvs-repository-weak-security(18369)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18369'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0915?


Explain the CVE ID: What does the identifier CVE-2004-0916 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0916.

Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containing .. (dot dot) sequences in a filename.


Provide references for further information: Can you share references or external links related to CVE-2004-0916?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kyz.uklinux.net/cabextract.php#changes'}, {'name': '12882', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12882/'}, {'name': 'DSA-574', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-574'}, {'name': 'cabextract-directory-traversal(17766)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17766'}, {'name': '11460', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11460'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0916?


Explain the CVE ID: What does the identifier CVE-2004-0917 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0917.

The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to /diag.


Provide references for further information: Can you share references or external links related to CVE-2004-0917?

{'name': 'vignette-diagnostic-obtain-info(17530)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17530'}, {'name': '11267', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11267'}, {'name': '1011447', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011447'}, {'name': 'A092804-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2004/a092804-1.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0917?


Explain the CVE ID: What does the identifier CVE-2004-0918 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0918.

The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error.


Provide references for further information: Can you share references or external links related to CVE-2004-0918?

{'name': 'CLA-2005:923', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923'}, {'name': '11385', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11385'}, {'name': 'SCOSA-2005.16', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.16/SCOSA-2005.16.txt'}, {'name': 'RHSA-2004:591', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-591.html'}, {'name': '20041011 Squid Web Proxy Cache Remote Denial of Service Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=152&type=vulnerabilities&flashstatus=false'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Advisories/SQUID-2004_3.txt'}, {'name': 'oval:org.mitre.oval:def:10931', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10931'}, {'name': 'ADV-2008-1969', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1969/references'}, {'name': '30967', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30967'}, {'name': 'FLSA-2006:152809', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/updates/FEDORA--.shtml'}, {'name': 'SUSE-SR:2008:014', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html'}, {'name': 'FEDORA-2008-6045', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00122.html'}, {'name': 'OpenPKG-SA-2004.048', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://marc.info/?l=bugtraq&m=109913064629327&w=2'}, {'name': 'squid-snmp-asnparseheader-dos(17688)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17688'}, {'name': '30914', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30914'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Advisories/SQUID-2008_1.txt'}, {'name': 'GLSA-200410-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200410-15.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0918?


Explain the CVE ID: What does the identifier CVE-2004-0919 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0919.

The syscons CONS_SCRSHOT ioctl in FreeBSD 5.x allows local users to read arbitrary kernel memory via (1) negative coordinates or (2) large coordinates.


Provide references for further information: Can you share references or external links related to CVE-2004-0919?

{'name': '12722', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12722'}, {'name': 'FreeBSD-SA-04:15', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:15.syscons.asc'}, {'name': 'VU#969078', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/969078'}, {'name': '11321', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11321'}, {'name': 'syscons-consscrshot-info-disclosure(17584)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17584'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0919?


Explain the CVE ID: What does the identifier CVE-2004-0920 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0920.

Symantec Norton AntiVirus 2004, and earlier versions, allows a virus or other malicious code to avoid detection or cause a denial of service (application crash) using a filename containing an MS-DOS device name.


Provide references for further information: Can you share references or external links related to CVE-2004-0920?

{'name': 'nav-antivirus-security-bypass(17603)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17603'}, {'name': '20041005 Symantec Norton AntiVirus Reserved Device Name Handling Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=147&type=vulnerabilities'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.seifried.org/security/advisories/kssa-010.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0920?


Explain the CVE ID: What does the identifier CVE-2004-0921 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0921.

AFP Server on Mac OS X 10.3.x to 10.3.5, when a guest has mounted an AFP volume, allows the guest to "terminate authenticated user mounts" via modified SessionDestroy packets.


Provide references for further information: Can you share references or external links related to CVE-2004-0921?

{'name': '11322', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11322'}, {'name': 'APPLE-SA-2004-09-30', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0921?


Explain the CVE ID: What does the identifier CVE-2004-0922 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0922.

AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which causes AFP to change a write-only AFP Drop Box to be read-write when the Drop Box is on a share that is mounted by a guest, which allows attackers to read the Drop Box.


Provide references for further information: Can you share references or external links related to CVE-2004-0922?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0922?


Explain the CVE ID: What does the identifier CVE-2004-0923 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0923.

CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local users to obtain user names and passwords.


Provide references for further information: Can you share references or external links related to CVE-2004-0923?

{'name': 'cups-password-disclosure(17593)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17593'}, {'name': 'oval:org.mitre.oval:def:10710', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10710'}, {'name': 'VU#557062', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/557062'}, {'name': 'MDKSA-2004:116', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:116'}, {'name': 'APPLE-SA-2004-09-30', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html'}, {'name': 'DSA-566', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-566'}, {'name': 'RHSA-2004:543', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-543.html'}, {'name': '11324', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11324'}, {'name': 'P-002', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-002.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0923?


Explain the CVE ID: What does the identifier CVE-2004-0924 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0924.

NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not.


Provide references for further information: Can you share references or external links related to CVE-2004-0924?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0924?


Explain the CVE ID: What does the identifier CVE-2004-0925 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0925.

Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.


Provide references for further information: Can you share references or external links related to CVE-2004-0925?

{'name': 'APPLE-SA-2004-09-30', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0925?


Explain the CVE ID: What does the identifier CVE-2004-0926 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0926.

Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a certain BMP image.


Provide references for further information: Can you share references or external links related to CVE-2004-0926?

{'name': '11322', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11322'}, {'name': 'APPLE-SA-2004-10-27', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Oct/msg00001.html'}, {'name': 'APPLE-SA-2004-09-30', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0926?


Explain the CVE ID: What does the identifier CVE-2004-0927 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0927.

ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same example self-signed certificate on each system, which allows remote attackers to decrypt sessions.


Provide references for further information: Can you share references or external links related to CVE-2004-0927?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0927?


Explain the CVE ID: What does the identifier CVE-2004-0928 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0928.

The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm".


Provide references for further information: Can you share references or external links related to CVE-2004-0928?

{'name': '20040923 New Macromedia Security Zone Bulletins Posted', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109621995623823&w=2'}, {'name': '12647', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12647/'}, {'name': 'VU#977440', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/977440'}, {'name': '20041005 ColdFusion MX 6.1 on IIS File Contents Disclosure', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=148&type=vulnerabilities'}, {'name': '11245', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11245'}, {'name': 'coldfusion-jrun-restriction-bypass(17484)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17484'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html'}, {'name': '12638', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12638/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/devnet/security/security_zone/mpsb04-09.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0928?


Explain the CVE ID: What does the identifier CVE-2004-0929 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0929.

Heap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG_SUPPORT (old JPEG support) option, allows remote attackers to execute arbitrary code via a malformed TIFF image.


Provide references for further information: Can you share references or external links related to CVE-2004-0929?

{'name': '20041022 Novell SuSe Linux LibTIFF Heap Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=154&type=vulnerabilities'}, {'name': 'SUSE-SA:2004:038', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_38_libtiff.html'}, {'name': 'libtiff-ojpegvsetfield-bo(17843)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17843'}, {'name': 'VU#129910', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/129910'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0929?


Explain the CVE ID: What does the identifier CVE-2004-0930 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0930.

The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.


Provide references for further information: Can you share references or external links related to CVE-2004-0930?

{'name': 'USN-22-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-22-1/'}, {'name': 'samba-msfnmatch-dos(17987)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17987'}, {'name': 'MDKSA-2004:131', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:131'}, {'name': 'CLA-2004:899', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000899'}, {'name': '20041108 Samba SMBD Remote Denial of Service Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=156&type=vulnerabilities&flashstatus=false'}, {'name': '101783', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101783-1'}, {'name': 'OpenPKG-SA-2004.054', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://marc.info/?l=bugtraq&m=110330519803655&w=2'}, {'name': 'APPLE-SA-2005-03-21', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html'}, {'name': 'GLSA-200411-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-21.xml'}, {'name': '11624', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11624'}, {'name': '20041201-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P'}, {'name': 'SUSE-SA:2004:040', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_40_samba.html'}, {'name': 'oval:org.mitre.oval:def:10936', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10936'}, {'name': 'SCOSA-2005.17', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt'}, {'name': '20041108 [SECURITY] CAN-2004-0930: Potential Remote Denial of Service Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109993720717957&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0930?


Explain the CVE ID: What does the identifier CVE-2004-0931 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0931.

MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service (crash) via an HTTP request to webdbm with high ASCII values in the Server field, which triggers an assert error in the IsAscii7 function.


Provide references for further information: Can you share references or external links related to CVE-2004-0931?

{'name': '10532', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10532'}, {'name': '12756', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://www.secunia.com/advisories/12756'}, {'name': '11346', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11346'}, {'name': '20041006 MySQL MaxDB Web Agent WebDBMServer Name Denial of Service Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=150&type=vulnerabilities&flashstatus=false'}, {'name': 'maxdb-isascii7dos(17633)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17633'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0931?


Explain the CVE ID: What does the identifier CVE-2004-0932 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0932.

McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.


Provide references for further information: Can you share references or external links related to CVE-2004-0932?

{'name': 'antivirus-zip-protection-bypass(17761)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17761'}, {'name': '11448', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11448'}, {'name': '20041018 Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0932?


Explain the CVE ID: What does the identifier CVE-2004-0933 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0933.

Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.


Provide references for further information: Can you share references or external links related to CVE-2004-0933?

{'name': 'antivirus-zip-protection-bypass(17761)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17761'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://supportconnectw.ca.com/public/ca_common_docs/arclib_vuln.asp'}, {'name': '11448', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11448'}, {'name': '20041018 Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0933?


Explain the CVE ID: What does the identifier CVE-2004-0934 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0934.

Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.


Provide references for further information: Can you share references or external links related to CVE-2004-0934?

{'name': 'antivirus-zip-protection-bypass(17761)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17761'}, {'name': 'VU#968818', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/968818'}, {'name': '11448', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11448'}, {'name': '20041018 Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0934?


Explain the CVE ID: What does the identifier CVE-2004-0935 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0935.

Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.


Provide references for further information: Can you share references or external links related to CVE-2004-0935?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0935?


Explain the CVE ID: What does the identifier CVE-2004-0936 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0936.

RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.


Provide references for further information: Can you share references or external links related to CVE-2004-0936?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0936?


Explain the CVE ID: What does the identifier CVE-2004-0937 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0937.

Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.


Provide references for further information: Can you share references or external links related to CVE-2004-0937?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0937?


Explain the CVE ID: What does the identifier CVE-2004-0938 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0938.

FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Secret attribute without the required leading packet.


Provide references for further information: Can you share references or external links related to CVE-2004-0938?

{'name': 'oval:org.mitre.oval:def:10837', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10837'}, {'name': 'oval:org.mitre.oval:def:1347', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1347'}, {'name': 'GLSA-200409-29', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200409-29.xml'}, {'name': '10178', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10178'}, {'name': '11222', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11222'}, {'name': 'freeradius-dos(17440)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17440'}, {'name': 'VU#541574', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/541574'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0938?


Explain the CVE ID: What does the identifier CVE-2004-0939 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0939.

changepassword.cgi in Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x, with LDAP authentication or NT domain authentication enabled, does not limit the number of times a bad password can be entered, which allows remote attackers to guess passwords via a brute force attack.


Provide references for further information: Can you share references or external links related to CVE-2004-0939?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.gosecure.ca/SecInfo/gosecure-2004-10.txt'}, {'name': '20041006 [GoSecure Advisory] Neoteris IVE Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109709990708794&w=2'}, {'name': '8365', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8365'}, {'name': '12752', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12752'}, {'name': 'juniper-netscreen-password-bruteforce(17629)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17629'}, {'name': '1011552', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011552'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0939?


Explain the CVE ID: What does the identifier CVE-2004-0940 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0940.

Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.


Provide references for further information: Can you share references or external links related to CVE-2004-0940?

{'name': 'OpenPKG-SA-2004.047', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://marc.info/?l=bugtraq&m=109906660225051&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.apacheweek.com/features/security-13'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm'}, {'name': 'MDKSA-2004:134', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:134'}, {'name': 'apache-modinclude-bo(17785)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17785'}, {'name': '11471', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11471'}, {'name': 'RHSA-2005:816', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-816.html'}, {'name': '12898', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12898/'}, {'name': 'DSA-594', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-594'}, {'name': '19073', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19073'}, {'name': '1011783', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011783'}, {'name': 'RHSA-2004:600', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-600.html'}, {'name': '102197', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-102197-1'}, {'name': 'ADV-2006-0789', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0789'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [3/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1888194 [3/13] - /httpd/site/trunk/content/security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [4/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0940?


Explain the CVE ID: What does the identifier CVE-2004-0941 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0941.

Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.


Provide references for further information: Can you share references or external links related to CVE-2004-0941?

{'name': 'RHSA-2006:0194', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2006-0194.html'}, {'name': '11663', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11663'}, {'name': 'P-071', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-071.shtml'}, {'name': '21050', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21050'}, {'name': 'RHSA-2004:638', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-638.html'}, {'name': '13179', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13179/'}, {'name': 'MDKSA-2006:113', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:113'}, {'name': 'oval:org.mitre.oval:def:11176', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11176'}, {'name': 'oval:org.mitre.oval:def:1195', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1195'}, {'name': '2004-0058', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0058'}, {'name': 'MDKSA-2006:114', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:114'}, {'name': 'DSA-601', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-601'}, {'name': 'MDKSA-2006:122', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:122'}, {'name': 'USN-25-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-25-1/'}, {'name': 'gd-graphics-gdmalloc-bo(18048)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18048'}, {'name': '18686', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18686'}, {'name': 'USN-33-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-33-1/'}, {'name': '20824', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20824'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0941?


Explain the CVE ID: What does the identifier CVE-2004-0942 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0942.

Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.


Provide references for further information: Can you share references or external links related to CVE-2004-0942?

{'name': 'RHSA-2004:562', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-562.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm'}, {'name': '20041101 DoS in Apache 2.0.52 ?', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028248.html'}, {'name': 'MDKSA-2004:135', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:135'}, {'name': 'apache-http-get-dos(17930)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17930'}, {'name': '19072', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19072'}, {'name': 'HPSBUX01123', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX01123'}, {'name': 'APPLE-SA-2005-08-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html'}, {'name': '2004-0061', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0061/'}, {'name': 'SSRT4876', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=110384374213596&w=2'}, {'name': 'APPLE-SA-2005-08-17', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html'}, {'name': 'oval:org.mitre.oval:def:10962', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10962'}, {'name': '102198', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1'}, {'name': 'ADV-2006-0789', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0789'}, {'name': '[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [3/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1888194 [3/13] - /httpd/site/trunk/content/security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [4/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210606 svn commit: r1075470 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0942?


Explain the CVE ID: What does the identifier CVE-2004-0943 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0943.


Provide references for further information: Can you share references or external links related to CVE-2004-0943?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0943?


Explain the CVE ID: What does the identifier CVE-2004-0944 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0944.

The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 generates easily predictable web session IDs, which allows remote attackers to hijack other sessions via the parentsessionid cookie.


Provide references for further information: Can you share references or external links related to CVE-2004-0944?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.corsaire.com/advisories/c040817-002.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.niscc.gov.uk/niscc/docs/re-20050228-00178.pdf?lang=en'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mitel.com/DocController?documentId=14223'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0944?


Explain the CVE ID: What does the identifier CVE-2004-0945 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0945.

The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 allows remote authenticated users to cause a denial of service (resource exhaustion) via a large number of active sessions, which exceeds ICP's maximum.


Provide references for further information: Can you share references or external links related to CVE-2004-0945?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.niscc.gov.uk/niscc/docs/re-20050228-00178.pdf?lang=en'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.corsaire.com/advisories/c040817-003.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mitel.com/DocController?documentId=14223'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0945?


Explain the CVE ID: What does the identifier CVE-2004-0946 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0946.

rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request.


Provide references for further information: Can you share references or external links related to CVE-2004-0946?

{'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=72113'}, {'name': 'RHSA-2005:014', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-014.html'}, {'name': 'nfsutils-getquotainfo-bo(18455)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18455'}, {'name': 'VU#698302', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/698302'}, {'name': 'RHSA-2004:583', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-583.html'}, {'name': 'oval:org.mitre.oval:def:10464', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10464'}, {'name': 'FLSA-2006:138098', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/426072/30/6740/threaded'}, {'name': '13440', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13440/'}, {'name': 'GLSA-200412-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200412-08.xml'}, {'name': 'MDKSA-2005:005', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:005'}, {'name': '11911', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11911'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0946?


Explain the CVE ID: What does the identifier CVE-2004-0947 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0947.

Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames.


Provide references for further information: Can you share references or external links related to CVE-2004-0947?

{'name': 'DSA-652', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-652'}, {'name': '11665', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11665'}, {'name': 'RHSA-2005:007', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-007.html'}, {'name': 'unarj-longfilename-bo(18044)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18044'}, {'name': 'GLSA-200411-29', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200411-29.xml'}, {'name': 'FLSA:2272', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lwn.net/Articles/121827/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0947?


Explain the CVE ID: What does the identifier CVE-2004-0948 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0948.


Provide references for further information: Can you share references or external links related to CVE-2004-0948?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0948?


Explain the CVE ID: What does the identifier CVE-2004-0949 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0949.

The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or (2) raise a counter value to an arbitrary number by sending the first part of the fragmented packet multiple times.


Provide references for further information: Can you share references or external links related to CVE-2004-0949?

{'name': '20163', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20163'}, {'name': '11695', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11695'}, {'name': 'DSA-1082', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1082'}, {'name': 'MDKSA-2005:022', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:022'}, {'name': '20041117 Advisory 14/2004: Linux 2.x smbfs multiple remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110072140811965&w=2'}, {'name': 'FLSA:2336', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2336'}, {'name': 'oval:org.mitre.oval:def:10360', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10360'}, {'name': 'USN-30-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-30-1/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/142004.html'}, {'name': 'DSA-1070', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1070'}, {'name': 'RHSA-2004:537', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-537.html'}, {'name': '20162', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20162'}, {'name': 'linux-smbrecvtrans2-memory-leak(18137)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18137'}, {'name': 'DSA-1067', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1067'}, {'name': 'DSA-1069', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1069'}, {'name': '2004-0061', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2004/0061/'}, {'name': 'RHSA-2004:505', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-505.html'}, {'name': '20202', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20202'}, {'name': 'RHSA-2004:504', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-504.html'}, {'name': '13232', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13232/'}, {'name': '20338', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20338'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0949?


Explain the CVE ID: What does the identifier CVE-2004-0950 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0950.

NetOp Host before 7.65 build 2004278 allows remote attackers to obtain sensitive hostname, username and local IP address information via (1) a NetOp HELO request, or (2) when responses are disabled, a "custom" HELO request.


Provide references for further information: Can you share references or external links related to CVE-2004-0950?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.corsaire.com/advisories/c040619-001.txt'}, {'name': 'danware-helo-obtain-information(18171)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18171'}, {'name': '20041119 Corsaire Security Advisory - Danware NetOp Host multiple information disclosure issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://msgs.securepoint.com/cgi-bin/get/bugtraq0411/213.html'}, {'name': '11710', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11710'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0950?


Explain the CVE ID: What does the identifier CVE-2004-0951 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0951.

The make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information.


Provide references for further information: Can you share references or external links related to CVE-2004-0951?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.corsaire.com/advisories/c041123-001.txt'}, {'name': '14568', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/14568'}, {'name': '16456', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/16456/'}, {'name': '1014711', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014711'}, {'name': 'hpigniteux-makerecovery-bypass-security(21858)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/21858'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0951?


Explain the CVE ID: What does the identifier CVE-2004-0952 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0952.

HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add_new_client command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption.