Provide references for further information: Can you share references or external links related to CVE-2004-0418?

{'name': 'DSA-519', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-519'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/092004.html'}, {'name': 'oval:org.mitre.oval:def:11242', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11242'}, {'name': '20040605-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc'}, {'name': 'oval:org.mitre.oval:def:1003', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1003'}, {'name': '20040611 [OpenPKG-SA-2004.027] OpenPKG Security Advisory (cvs)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108716553923643&w=2'}, {'name': 'RHSA-2004:233', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-233.html'}, {'name': 'MDKSA-2004:058', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:058'}, {'name': 'GLSA-200406-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200406-06.xml'}, {'name': '20040604-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc'}, {'name': '20040609 Advisory 09/2004: More CVS remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0418?


Explain the CVE ID: What does the identifier CVE-2004-0419 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0419.

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.


Provide references for further information: Can you share references or external links related to CVE-2004-0419?

{'name': '12019', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12019'}, {'name': 'xdm-socket-gain-access(16264)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16264'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.xfree86.org/show_bug.cgi?id=1376'}, {'name': 'MDKSA-2004:073', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073'}, {'name': 'oval:org.mitre.oval:def:10161', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10161'}, {'name': 'GLSA-200407-05', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200407-05.xml'}, {'name': 'P-001', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-001.shtml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900'}, {'name': '10423', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10423'}, {'name': '1010306', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010306'}, {'name': '20040526 008: SECURITY FIX: May 26, 2004', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata.html#xdm'}, {'name': 'RHSA-2004:478', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-478.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0419?


Explain the CVE ID: What does the identifier CVE-2004-0420 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0420.

The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.


Provide references for further information: Can you share references or external links related to CVE-2004-0420?

{'name': 'ie-clsid-file-extension-spoofing(14964)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14964'}, {'name': '9510', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9510'}, {'name': 'TA04-196A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-196A.html'}, {'name': '10736', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10736/'}, {'name': 'oval:org.mitre.oval:def:2894', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2894'}, {'name': 'oval:org.mitre.oval:def:3386', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3386'}, {'name': 'oval:org.mitre.oval:def:3604', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3604'}, {'name': 'oval:org.mitre.oval:def:2245', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2245'}, {'name': '20040127 GOOROO CROSSING: File Spoofing Internet Explorer 6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/351379'}, {'name': 'oval:org.mitre.oval:def:3533', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3533'}, {'name': 'VU#106324', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/106324'}, {'name': '20040127 RE: GOOROO CROSSING: File Spoofing Internet Explorer 6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.security-express.com/archives/bugtraq/2004-01/0300.html'}, {'name': 'oval:org.mitre.oval:def:2381', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2381'}, {'name': 'MS04-024', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-024'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0420?


Explain the CVE ID: What does the identifier CVE-2004-0421 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0421.

The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.


Provide references for further information: Can you share references or external links related to CVE-2004-0421?

{'name': 'FEDORA-2004-106', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=fedora-announce-list&m=108451353608968&w=2'}, {'name': '20040429 [OpenPKG-SA-2004.017] OpenPKG Security Advisory (png)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108334922320309&w=2'}, {'name': 'oval:org.mitre.oval:def:971', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A971'}, {'name': 'DSA-498', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-498'}, {'name': 'oval:org.mitre.oval:def:11710', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11710'}, {'name': 'MDKSA-2004:040', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:040'}, {'name': '22958', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22958'}, {'name': 'libpng-png-dos(16022)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16022'}, {'name': 'APPLE-SA-2004-09-09', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00056.html'}, {'name': '10244', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10244'}, {'name': 'FEDORA-2004-105', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://marc.info/?l=fedora-announce-list&m=108451350029261&w=2'}, {'name': 'MDKSA-2006:213', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:213'}, {'name': 'RHSA-2004:180', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-180.html'}, {'name': 'MDKSA-2006:212', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:212'}, {'name': '2004-0025', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://marc.info/?l=bugtraq&m=108335030208523&w=2'}, {'name': 'RHSA-2004:181', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-181.html'}, {'name': '22957', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22957'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0421?


Explain the CVE ID: What does the identifier CVE-2004-0422 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0422.

flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack.


Provide references for further information: Can you share references or external links related to CVE-2004-0422?

{'name': 'RHSA-2004:344', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-344.html'}, {'name': 'DSA-500', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-500'}, {'name': 'flim-insecure-temporary-file(16027)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16027'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0422?


Explain the CVE ID: What does the identifier CVE-2004-0423 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0423.

The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file.


Provide references for further information: Can you share references or external links related to CVE-2004-0423?

{'name': '20040418 ssmtp insecure file creation', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108239608131119&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0423?


Explain the CVE ID: What does the identifier CVE-2004-0424 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0424.

Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.


Provide references for further information: Can you share references or external links related to CVE-2004-0424?

{'name': 'SSA:2004-119', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.659586'}, {'name': 'SuSE-SA:2004:010', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_10_kernel.html'}, {'name': 'oval:org.mitre.oval:def:939', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A939'}, {'name': 'oval:org.mitre.oval:def:11214', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11214'}, {'name': 'RHSA-2004:183', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-183.html'}, {'name': 'MDKSA-2004:037', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:037'}, {'name': 'linux-ipsetsockopt-integer-bo(15907)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15907'}, {'name': '20040504-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc'}, {'name': '10179', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10179'}, {'name': 'ESA-20040428-004', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.isec.pl/vulnerabilities/isec-0015-msfilter.txt'}, {'name': 'CLA-2004:852', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852'}, {'name': '20040420 Linux kernel setsockopt MCAST_MSFILTER integer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108253171301153&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0424?


Explain the CVE ID: What does the identifier CVE-2004-0425 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0425.

Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie.


Provide references for further information: Can you share references or external links related to CVE-2004-0425?

{'name': 'siteminder-affiliate-smprofile-bo(15950)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15950'}, {'name': 'A042204-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2004/a042204-1.txt'}, {'name': '10198', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10198'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0425?


Explain the CVE ID: What does the identifier CVE-2004-0426 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0426.

rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path.


Provide references for further information: Can you share references or external links related to CVE-2004-0426?

{'name': 'GLSA-200407-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200407-10.xml'}, {'name': 'oval:org.mitre.oval:def:967', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A967'}, {'name': '11523', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11523'}, {'name': '20040521 [OpenPKG-SA-2004.025] OpenPKG Security Advisory (rsync)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108515912212018&w=2'}, {'name': 'rsync-write-files(16014)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16014'}, {'name': '11688', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11688'}, {'name': '11669', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11669'}, {'name': 'O-134', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-134.shtml'}, {'name': 'RHSA-2004:192', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-192.html'}, {'name': '12054', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12054'}, {'name': '11514', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11514'}, {'name': '11993', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11993'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://rsync.samba.org/'}, {'name': 'SSA:2004-124-01', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.403462'}, {'name': 'MDKSA-2004:042', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:042'}, {'name': 'oval:org.mitre.oval:def:9495', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9495'}, {'name': '11537', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11537'}, {'name': 'DSA-499', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-499'}, {'name': '11583', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11583'}, {'name': 'O-212', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-212.shtml'}, {'name': '10247', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10247'}, {'name': 'TSL-2004-0024', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.net/errata/misc/2004/TSL-2004-0024-rsync.asc.txt'}, {'name': '11515', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11515'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0426?


Explain the CVE ID: What does the identifier CVE-2004-0427 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0427.

The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.


Provide references for further information: Can you share references or external links related to CVE-2004-0427?

{'name': '20163', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20163'}, {'name': 'RHSA-2004:327', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-327.html'}, {'name': '11464', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11464'}, {'tags': ['x_refsource_MISC'], 'url': 'http://linux.bkbits.net:8080/linux-2.6/cset%40407b1217x4jtqEkpFW2g_-RcF0726A'}, {'name': 'linux-dofork-memory-leak(16002)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16002'}, {'name': 'DSA-1082', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1082'}, {'name': 'RHSA-2004:255', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-255.html'}, {'name': 'FEDORA-2004-111', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/updates/FEDORA-2004-111.shtml'}, {'name': '11861', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11861'}, {'name': '[linux-kernel] 20040408 [PATCH]: 2.4/2.6 do_fork() error path memory leak', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=linux-kernel&m=108139073506983&w=2'}, {'name': 'RHSA-2004:260', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-260.html'}, {'name': 'SuSE-SA:2004:010', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_10_kernel.html'}, {'name': 'DSA-1070', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1070'}, {'name': 'oval:org.mitre.oval:def:10297', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10297'}, {'name': '20162', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20162'}, {'name': 'MDKSA-2004:037', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:037'}, {'name': '11891', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11891'}, {'name': '11486', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11486'}, {'name': 'TLSA-2004-14', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://www.turbolinux.com/security/2004/TLSA-2004-14.txt'}, {'name': '11541', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11541'}, {'tags': ['x_refsource_MISC'], 'url': 'http://linux.bkbits.net:8080/linux-2.4/cset%40407bf20eDeeejm8t36_tpvSE-8EFHA'}, {'name': 'DSA-1067', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1067'}, {'name': 'CLA-2004:846', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846'}, {'name': '10221', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10221'}, {'name': 'DSA-1069', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1069'}, {'name': '20040504-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc'}, {'name': '11429', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11429'}, {'name': '20040505-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040505-01-U.asc'}, {'name': 'oval:org.mitre.oval:def:2819', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2819'}, {'name': 'O-164', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-164.shtml'}, {'name': '20202', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20202'}, {'name': 'GLSA-200407-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200407-02.xml'}, {'name': '11892', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11892'}, {'name': '20338', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20338'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0427?


Explain the CVE ID: What does the identifier CVE-2004-0428 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0428.

Unknown vulnerability in CoreFoundation in Mac OS X 10.3.3 and Mac OS X 10.3.3 Server, related to "the handling of an environment variable," has unknown attack vectors and unknown impact.


Provide references for further information: Can you share references or external links related to CVE-2004-0428?

{'name': '1010045', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010045'}, {'name': 'ESB-2004.0314', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4070'}, {'name': 'macos-corefoundation-environment(16051)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16051'}, {'name': 'APPLE-SA-2004-05-03', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.virus.org/macsec-0405/msg00000.html'}, {'name': '10270', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10270'}, {'name': '11539', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11539'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0428?


Explain the CVE ID: What does the identifier CVE-2004-0429 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0429.

Unknown vulnerability related to "the handling of large requests" in RAdmin for Apple Mac OS X 10.3.3 and Mac OS X 10.2.8 may allow attackers to have unknown impact via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2004-0429?

{'name': '20040503 [product-security@apple.com: APPLE-SA-2004-05-03 Security Update 2004-05-03]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108369640424244&w=2'}, {'name': '1010045', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010045'}, {'name': 'ESB-2004.0314', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4070'}, {'name': 'macos-radmin-large-request(16053)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16053'}, {'name': 'APPLE-SA-2004-05-03', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2004/May/msg00000.html'}, {'name': '11539', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11539/'}, {'name': 'O-138', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-138.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0429?


Explain the CVE ID: What does the identifier CVE-2004-0430 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0430.

Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string that is longer than the associated length field.


Provide references for further information: Can you share references or external links related to CVE-2004-0430?

{'name': 'A050304-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2004/a050304-1.txt'}, {'name': 'applefileserver-afp-pathname-bo(16049)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16049'}, {'name': '1010039', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010039'}, {'name': 'VU#648406', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/648406'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/securitynews/5QP0115CUO.html'}, {'name': 'APPLE-SA-2004-05-03', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00049.html'}, {'name': '11539', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11539'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0430?


Explain the CVE ID: What does the identifier CVE-2004-0431 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0431.

Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2004-0431?

{'name': 'APPLE-SA-2004-04-30', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00048.html'}, {'name': '20040502 EEYE: Apple QuickTime (QuickTime.qts) Heap Overflow', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=108356485013237&w=2'}, {'name': 'quicktime-heap-bo(16026)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16026'}, {'name': 'VU#782958', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/782958'}, {'name': '20040502 EEYE: Apple QuickTime (QuickTime.qts) Heap Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108360110618389&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0431?


Explain the CVE ID: What does the identifier CVE-2004-0432 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0432.

ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions.


Provide references for further information: Can you share references or external links related to CVE-2004-0432?

{'name': '10252', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10252'}, {'name': 'proftpd-cidr-acl-bypass(16038)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16038'}, {'name': '20040430 [OpenPKG-SA-2004.018] OpenPKG Security Advisory (proftpd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108335051011341&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.proftpd.org/show_bug.cgi?id=2267'}, {'name': '2004-0025', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://marc.info/?l=bugtraq&m=108335030208523&w=2'}, {'name': '11527', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11527'}, {'name': 'MDKSA-2004:041', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:041'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0432?


Explain the CVE ID: What does the identifier CVE-2004-0433 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0433.

Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP (realrtsp) streams, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (a) long URLs, (b) long Real server responses, or (c) long Real Data Transport (RDT) packets.


Provide references for further information: Can you share references or external links related to CVE-2004-0433?

{'name': 'mplayer-rtsp-rdt-bo(16019)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16019'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xinehq.de/index.php/security/XSA-2004-3'}, {'name': 'GLSA-200405-24', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-24.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0433?


Explain the CVE ID: What does the identifier CVE-2004-0434 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0434.

k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leads to a heap-based buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2004-0434?

{'name': 'heimdal-kadmind-bo(16071)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16071'}, {'name': 'DSA-504', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-504'}, {'name': '20040506 Advisory: Heimdal kadmind version4 remote heap overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020998.html'}, {'name': '20040505 Advisory: Heimdal kadmind version4 remote heap overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108386148126457&w=2'}, {'name': 'GLSA-200405-23', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-23.xml'}, {'name': 'FreeBSD-SA-04:09', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:09.kadmind.asc'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0434?


Explain the CVE ID: What does the identifier CVE-2004-0435 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0435.

Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not properly handle the MS_INVALIDATE operation, which leads to cache consistency problems that allow a local user to prevent certain changes to files from being committed to disk.


Provide references for further information: Can you share references or external links related to CVE-2004-0435?

{'name': '10416', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10416'}, {'name': 'FreeBSD-SA-04:11', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:11.msync.asc'}, {'name': '11714', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11714'}, {'name': 'freebsd-msync-gain-privileges(16254)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16254'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0435?


Explain the CVE ID: What does the identifier CVE-2004-0437 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0437.

Titan FTP Server version 3.01 build 163, and possibly other versions before build 169, allows remote authenticated users to cause a denial of service (crash) by disconnecting from the system during a "LIST -L" command, which causes Titan to access an invalid socket.


Provide references for further information: Can you share references or external links related to CVE-2004-0437?

{'name': 'titan-list-command-dos(16057)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16057'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/windowsntfocus/5RP0215CUU.html'}, {'name': '20040505 Titan FTP Server Aborted LIST DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108378048513596&w=2'}, {'name': '20040505 Titan FTP Server Aborted LIST DoS', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0025.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0437?


Explain the CVE ID: What does the identifier CVE-2004-0444 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0444.

Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allow remote attackers to cause a denial of service or execute arbitrary code via (1) a manipulated length byte in the first-level decoding routine for NetBIOS Name Service (NBNS) that modifies an index variable and leads to a stack-based buffer overflow, (2) a heap-based corruption problem in an NBNS response that is missing certain RR fields, and (3) a stack-based buffer overflow in the DNS component via a Resource Record (RR) with a long canonical name (CNAME) field composed of many smaller components.


Provide references for further information: Can you share references or external links related to CVE-2004-0444?

{'name': '6099', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6099'}, {'name': 'VU#634414', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/634414'}, {'name': '1010146', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010146'}, {'name': '1010145', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010145'}, {'name': 'VU#637318', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/637318'}, {'name': '10335', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10335'}, {'name': 'O-141', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-141.shtml'}, {'name': '20040512 EEYE: Symantec Multiple Firewall NBNS Response Processing Stack Overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021360.html'}, {'name': 'VU#294998', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/294998'}, {'name': '10333', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10333'}, {'name': 'symantec-nbns-response-bo(16134)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16134'}, {'name': '20040512 EEYE: Symantec Multiple Firewall Remote DNS KERNEL Overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021361.html'}, {'name': '6101', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6101'}, {'name': '6102', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6102'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html'}, {'name': 'symantec-dns-response-bo(16137)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16137'}, {'name': '1010144', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010144'}, {'name': '20040512 EEYE: Symantec Multiple Firewall NBNS Response Remote Heap Corruption', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021362.html'}, {'name': '10334', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10334'}, {'name': '11066', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11066'}, {'name': 'symantec-firewalls-nbns-bo(16135)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16135'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0444?


Explain the CVE ID: What does the identifier CVE-2004-0445 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0445.

The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.


Provide references for further information: Can you share references or external links related to CVE-2004-0445?

{'name': '1010146', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010146'}, {'name': '1010145', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010145'}, {'name': 'O-141', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-141.shtml'}, {'name': 'VU#682110', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/682110'}, {'name': '6100', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6100'}, {'name': 'symantec-firewall-dns-dos(16132)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16132'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html'}, {'name': '20040512 EEYE: Symantec Multiple Firewall DNS Response Denial-of-Service', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html'}, {'name': '1010144', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010144'}, {'name': '11066', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11066'}, {'name': '10336', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10336'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0445?


Explain the CVE ID: What does the identifier CVE-2004-0447 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0447.

Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact.  NOTE: due to a typo, this issue was accidentally assigned CVE-2004-0477.  This is the proper candidate to use for the Linux local DoS.


Provide references for further information: Can you share references or external links related to CVE-2004-0447?

{'name': '20163', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20163'}, {'name': '[owl-users] 20040619 Linux 2.4.26-ow2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html'}, {'name': 'linux-ia64-dos(16661)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16661'}, {'name': 'RHSA-2004:413', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-413.html'}, {'name': 'DSA-1082', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1082'}, {'name': 'GLSA-200407-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200407-16.xml'}, {'name': 'DSA-1070', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1070'}, {'name': 'oval:org.mitre.oval:def:10918', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10918'}, {'name': '20162', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20162'}, {'name': '10783', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10783'}, {'name': 'DSA-1067', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1067'}, {'name': 'DSA-1069', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1069'}, {'name': 'O-193', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-193.shtml'}, {'name': '20202', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20202'}, {'name': '20040804-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc'}, {'name': '20338', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20338'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0447?


Explain the CVE ID: What does the identifier CVE-2004-0448 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0448.

Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages.


Provide references for further information: Can you share references or external links related to CVE-2004-0448?

{'name': 'jftpgw-log-format-string(16271)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16271'}, {'name': 'DSA-510', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-510'}, {'name': '10438', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10438'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0448?


Explain the CVE ID: What does the identifier CVE-2004-0449 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0449.


Provide references for further information: Can you share references or external links related to CVE-2004-0449?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0449?


Explain the CVE ID: What does the identifier CVE-2004-0450 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0450.

Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by log2mail.


Provide references for further information: Can you share references or external links related to CVE-2004-0450?

{'name': '10460', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10460'}, {'name': 'DSA-513', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-513'}, {'tags': ['x_refsource_MISC'], 'url': 'http://felinemenace.org/~jaguar/advisories/log2mail.txt'}, {'name': '6711', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/6711'}, {'name': '11769', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11769'}, {'name': 'log2mail-syslog-format-string(16311)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16311'}, {'name': '11768', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11768'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0450?


Explain the CVE ID: What does the identifier CVE-2004-0451 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0451.

Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.


Provide references for further information: Can you share references or external links related to CVE-2004-0451?

{'name': '1010539', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010539'}, {'name': 'DSA-521', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-521'}, {'name': 'sup-format-string(16459)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16459'}, {'name': '10571', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10571'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0451?


Explain the CVE ID: What does the identifier CVE-2004-0452 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0452.

Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack.


Provide references for further information: Can you share references or external links related to CVE-2004-0452?

{'name': 'RHSA-2005:105', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-105.html'}, {'name': 'oval:org.mitre.oval:def:9938', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9938'}, {'name': 'RHSA-2005:103', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-103.html'}, {'name': '55314', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/55314'}, {'name': 'DSA-620', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-620'}, {'name': '20060101-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U'}, {'name': 'FLSA-2006:152845', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/updates/FEDORA--.shtml'}, {'name': '12991', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12991'}, {'name': '20050111 [OpenPKG-SA-2005.001] OpenPKG Security Advisory (perl)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110547693019788&w=2'}, {'name': 'USN-44-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/usn-44-1/'}, {'name': 'GLSA-200501-38', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml'}, {'name': '12072', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12072'}, {'name': '18517', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18517'}, {'name': 'perl-filepathrmtree-insecure-permissions(18650)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18650'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0452?


Explain the CVE ID: What does the identifier CVE-2004-0453 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0453.

Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service (emulator crash) and possibly execute arbitrary code via format string specifiers in an output string.


Provide references for further information: Can you share references or external links related to CVE-2004-0453?

{'name': '20040614 VICE emulator format string vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108723630730487&w=2'}, {'name': 'vice-memory-dump-format-string(16404)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16404'}, {'name': '10543', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10543'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0453?


Explain the CVE ID: What does the identifier CVE-2004-0454 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0454.

Buffer overflow in the msg function for rlpr daemon (rlprd) 2.04 allows local users to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0454?

{'name': 'rlpr-msg-bo(16454)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16454'}, {'name': '10578', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10578'}, {'name': 'DSA-524', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-524'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0454?


Explain the CVE ID: What does the identifier CVE-2004-0455 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0455.

Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql.


Provide references for further information: Can you share references or external links related to CVE-2004-0455?

{'name': 'DSA-523', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-523'}, {'name': '10577', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10577'}, {'name': 'wwwsql-cgi-command-execution(16455)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16455'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0455?


Explain the CVE ID: What does the identifier CVE-2004-0456 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0456.

Stack-based buffer overflow in pavuk 0.9pl28, 0.9pl27, and possibly other versions allows remote web sites to execute arbitrary code via a long HTTP Location header.


Provide references for further information: Can you share references or external links related to CVE-2004-0456?

{'name': 'DSA-527', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-527'}, {'name': 'pavuk-location-bo(16551)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16551'}, {'name': '10633', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10633'}, {'name': '20040702 pavuk buffer overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023322.html'}, {'name': 'GLSA-200406-22', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200406-22.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0456?


Explain the CVE ID: What does the identifier CVE-2004-0457 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0457.

The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2004-0457?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://packages.debian.org/changelogs/pool/main/m/mysql-dfsg/mysql-dfsg_4.0.20-11/changelog'}, {'name': 'oval:org.mitre.oval:def:10693', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10693'}, {'name': 'DSA-540', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-540'}, {'name': 'RHSA-2004:597', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-597.html'}, {'name': 'P-018', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/p-018.shtml'}, {'name': 'mysql-mysqlhotcopy-insecure-file(17030)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17030'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0457?


Explain the CVE ID: What does the identifier CVE-2004-0458 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0458.

mah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which triggers a null pointer dereference.


Provide references for further information: Can you share references or external links related to CVE-2004-0458?

{'name': '10343', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10343'}, {'name': 'mah-jong-null-dos(16143)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16143'}, {'name': 'DSA-503', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-503'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0458?


Explain the CVE ID: What does the identifier CVE-2004-0459 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0459.

The Clear Channel Assessment (CCA) algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy (aka "jabber"), which prevents devices from transmitting data.


Provide references for further information: Can you share references or external links related to CVE-2004-0459?

{'tags': ['x_refsource_MISC'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2004-009.pdf'}, {'name': '20040513 802.11b (others) single packet DoS', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0631.html'}, {'name': '16034', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16034'}, {'name': '1010152', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010152'}, {'name': 'AA-2004.02', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=4091'}, {'name': 'VU#106678', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/106678'}, {'name': 'ieee80211-cca-dos(16138)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16138'}, {'name': '10342', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10342'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0459?


Explain the CVE ID: What does the identifier CVE-2004-0460 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0460.

Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.


Provide references for further information: Can you share references or external links related to CVE-2004-0460?

{'name': 'VU#317350', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/317350'}, {'name': '10590', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10590'}, {'name': 'MDKSA-2004:061', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:061'}, {'name': '23265', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23265'}, {'name': '20040622 DHCP Vuln // no code 0day //', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108795911203342&w=2'}, {'name': '20040708 [OpenPKG-SA-2004.031] OpenPKG Security Advisory (dhcpd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108938625206063&w=2'}, {'name': 'SuSE-SA:2004:019', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_19_dhcp_server.html'}, {'name': 'dhcp-ascii-log-bo(16475)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16475'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf'}, {'name': 'TA04-174A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-174A.html'}, {'name': '20040628 ISC DHCP overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108843959502356&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0460?


Explain the CVE ID: What does the identifier CVE-2004-0461 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0461.

The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2004-0461?

{'name': 'VU#654390', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/654390'}, {'name': 'dhcp-c-include-bo(16476)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16476'}, {'name': 'MDKSA-2004:061', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:061'}, {'name': '23265', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23265'}, {'name': '20040622 DHCP Vuln // no code 0day //', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108795911203342&w=2'}, {'name': '20040708 [OpenPKG-SA-2004.031] OpenPKG Security Advisory (dhcpd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108938625206063&w=2'}, {'name': 'SuSE-SA:2004:019', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2004_19_dhcp_server.html'}, {'name': '10591', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10591'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf'}, {'name': 'TA04-174A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-174A.html'}, {'name': '20040628 ISC DHCP overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108843959502356&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0461?


Explain the CVE ID: What does the identifier CVE-2004-0462 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0462.

The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session with the same server.


Provide references for further information: Can you share references or external links related to CVE-2004-0462?

{'name': 'network-device-secure-plaintext(17702)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17702'}, {'name': 'VU#546483', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/546483'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0462?


Explain the CVE ID: What does the identifier CVE-2004-0463 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0463.


Provide references for further information: Can you share references or external links related to CVE-2004-0463?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0463?


Explain the CVE ID: What does the identifier CVE-2004-0464 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0464.


Provide references for further information: Can you share references or external links related to CVE-2004-0464?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0464?


Explain the CVE ID: What does the identifier CVE-2004-0465 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0465.

Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequences in the WCP_USER parameter.


Provide references for further information: Can you share references or external links related to CVE-2004-0465?

{'name': 'VU#628411', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/628411'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/JSHA-69HVPK'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cirt.dk/advisories/cirt-29-advisory.pdf'}, {'name': '20050220 The WebConnect 6.4.4 and 6.5 contains several vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110910838600145&w=2'}, {'name': 'webconnect-wcpuser-directory-traversal(19394)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19394'}, {'name': '14006', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14006/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0465?


Explain the CVE ID: What does the identifier CVE-2004-0466 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0466.

WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service (hang) via a URL containing an MS-DOS device name such as (1) AUX, (2) CON, (3) PRN, (4) COM1, or (5) LPT1.


Provide references for further information: Can you share references or external links related to CVE-2004-0466?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/JSHA-69FVMM'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cirt.dk/advisories/cirt-29-advisory.pdf'}, {'name': 'webconnect-device-name-dos(19393)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19393'}, {'name': '20050220 The WebConnect 6.4.4 and 6.5 contains several vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110910838600145&w=2'}, {'name': '14006', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14006/'}, {'name': 'VU#552561', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/552561'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0466?


Explain the CVE ID: What does the identifier CVE-2004-0467 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0467.

Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service (routing disabled) via a large number of MPLS packets, which are not filtered or verified before being sent to the Routing Engine, which reduces the speed at which other packets are processed.


Provide references for further information: Can you share references or external links related to CVE-2004-0467?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/JSHA-68ZJCQ'}, {'name': '1013039', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013039'}, {'name': '12379', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12379'}, {'name': 'VU#409555', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/409555'}, {'name': '14049', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14049'}, {'name': 'RHSA-2005:081', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-081.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.niscc.gov.uk/niscc/docs/al-20050126-00067.html?lang=en'}, {'name': 'junos-dos(19094)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19094'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0467?


Explain the CVE ID: What does the identifier CVE-2004-0468 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0468.

Memory leak in Juniper JUNOS Packet Forwarding Engine (PFE) allows remote attackers to cause a denial of service (memory exhaustion and device reboot) via certain IPv6 packets.


Provide references for further information: Can you share references or external links related to CVE-2004-0468?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.jpcert.or.jp/at/2004/at040009.txt'}, {'name': 'VU#658859', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/658859'}, {'name': 'juniper-ipv6-dos(16548)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16548'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/JSHA-6253CC'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0468?


Explain the CVE ID: What does the identifier CVE-2004-0469 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0469.

Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation.


Provide references for further information: Can you share references or external links related to CVE-2004-0469?

{'name': 'vpn1-isakmp-bo(16060)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16060'}, {'name': '20040504 ISAKMP Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CHECKPOINT'], 'url': 'http://www.checkpoint.com/techsupport/alerts/ike_vpn.html'}, {'name': '10273', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10273'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0469?


Explain the CVE ID: What does the identifier CVE-2004-0470 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0470.

BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2, when editing weblogic.xml using WebLogic Builder or the SecurityRoleAssignmentMBean.toXML method, inadvertently removes security-role-assignment tags when weblogic.xml does not have a principal-name tag, which can remove intended access restrictions for the associated web application.


Provide references for further information: Can you share references or external links related to CVE-2004-0470?

{'name': '11593', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11593'}, {'name': 'weblogic-application-unauth-access(16123)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16123'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_59.00.jsp'}, {'name': '1010128', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010128'}, {'name': '6076', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6076'}, {'name': 'VU#950070', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/950070'}, {'name': '10328', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10328'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0470?


Explain the CVE ID: What does the identifier CVE-2004-0471 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0471.

BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce site restrictions for starting and stopping servers for users in the Admin and Operator security roles, which allows unauthorized users to cause a denial of service (service shutdown).


Provide references for further information: Can you share references or external links related to CVE-2004-0471?

{'name': '1010129', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010129'}, {'name': '10327', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10327'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_60.00.jsp'}, {'name': '6077', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6077'}, {'name': 'weblogic-server-policy-bypass(16121)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16121'}, {'name': '11594', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11594'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0471?


Explain the CVE ID: What does the identifier CVE-2004-0472 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0472.


Provide references for further information: Can you share references or external links related to CVE-2004-0472?


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0472?


Explain the CVE ID: What does the identifier CVE-2004-0473 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0473.

Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters that begin a hostname in a telnet URI, which allows remote attackers to insert options to the resulting command line and overwrite arbitrary files via (1) the "-f" option on Windows XP or (2) the "-n" option on Linux.


Provide references for further information: Can you share references or external links related to CVE-2004-0473?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.opera.com/linux/changelogs/750/index.dml'}, {'name': 'opera-telnet-file-overwrite(16139)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16139'}, {'name': '20040512 Opera Telnet URI Handler File Creation/Truncation Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=104&type=vulnerabilities'}, {'name': '1010142', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010142'}, {'name': 'GLSA-200405-19', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-19.xml'}, {'name': '10341', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10341'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0473?


Explain the CVE ID: What does the identifier CVE-2004-0474 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0474.

Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL.  NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue.


Provide references for further information: Can you share references or external links related to CVE-2004-0474?

{'name': '9621', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9621'}, {'name': 'winxp-helpctr-hcp-xss(15101)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15101'}, {'name': '20040213 Re: HelpCtr - allow open any page or run', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0688.html'}, {'name': '20040207 HelpCtr - allow open any page or run', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/353248'}, {'name': '20040210 Re: HelpCtr - allow open any page or run', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0450.html'}, {'name': '20040211 Re: HelpCtr - allow open any page or run', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107652584102003&w=2'}, {'name': '20040210 Re: HelpCtr - allow open any page or run', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0440.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0474?


Explain the CVE ID: What does the identifier CVE-2004-0475 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0475.

The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double backward slash ("\\") before the target CHM file, as demonstrated using an "ms-its" URL to ntshared.chm.  NOTE: this bug may overlap CVE-2003-1041.


Provide references for further information: Can you share references or external links related to CVE-2004-0475?

{'name': '10348', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10348'}, {'name': '20040513 Showhelp() local CHM file execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/363202'}, {'name': 'ie-showhelp-chm-execution(16147)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16147'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0475?


Explain the CVE ID: What does the identifier CVE-2004-0476 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0476.

Buffer overflow in 3Com OfficeConnect Remote 812 ADSL Router 1.1.9.4 allows remote attackers to cause a denial of service (reboot or packet loss) via a long string containing Telnet escape characters to the Telnet port.


Provide references for further information: Can you share references or external links related to CVE-2004-0476?

{'name': '3com-officeconnect-telnet-bo(16257)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16257'}, {'name': '20040526 OfficeConnect Remote 812 ADSL Router Telnet Protocol DoS Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=105&type=vulnerabilities'}, {'name': '11716', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11716'}, {'name': '10419', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10419'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0476?


Explain the CVE ID: What does the identifier CVE-2004-0477 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0477.

Unknown vulnerability in 3Com OfficeConnect Remote 812 ADSL Router allows remote attackers to bypass authentication via repeated attempts using any username and password.  NOTE: this identifier was inadvertently re-used for another issue due to a typo; that issue was assigned CVE-2004-0447.  This candidate is ONLY for the ADSL router bypass.


Provide references for further information: Can you share references or external links related to CVE-2004-0477?

{'name': '20040527 iDEFENSE Security Advisory 05.27.04: 3Com OfficeConnect Remote 812 ADSL Router Authentication Bypass Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=106&type=vulnerabilities&flashstatus=false'}, {'name': '3com-officeconnect-gain-access(16267)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16267'}, {'name': '10426', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10426'}, {'name': '11716', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11716'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0477?


Explain the CVE ID: What does the identifier CVE-2004-0478 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0478.

Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javascript with an infinite loop  that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded ctrl-U.


Provide references for further information: Can you share references or external links related to CVE-2004-0478?

{'name': '[Dailydave] 20040514 Mozilla bug might even get fixed!', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.immunitysec.com/pipermail/dailydave/2004-May/000587.html'}, {'name': 'mozilla-javascript-dos(16225)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16225'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=243540'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0478?


Explain the CVE ID: What does the identifier CVE-2004-0479 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0479.

Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables the imagetoolbar functionality with a META tag, which triggers a null dereference.


Provide references for further information: Can you share references or external links related to CVE-2004-0479?

{'name': '20040514 IE Crash - Anyone Seen This Before?', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021500.html'}, {'name': '20040516 Re: IE Crash - Anyone Seen This Before?', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=108476938219070&w=2'}, {'name': '20040514 IE Crash - Anyone Seen This Before?', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=108457938412310&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0479?


Explain the CVE ID: What does the identifier CVE-2004-0480 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0480.

Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe.


Provide references for further information: Can you share references or external links related to CVE-2004-0480?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?rs=475/context=SSKTWP&uid=swg21169510'}, {'name': '10600', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10600'}, {'name': '20040627 Lotus Notes URL argument injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108843896506099&w=2'}, {'name': 'lotus-notes-xss(16496)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16496'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/application/poi/display?id=111&type=vulnerabilities'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0480?


Explain the CVE ID: What does the identifier CVE-2004-0481 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0481.

The logging feature in kcms_configure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local users to corrupt arbitrary files via a symlink attack on the KCS_ClogFile file.


Provide references for further information: Can you share references or external links related to CVE-2004-0481?

{'name': '20050223 Sun Solaris kcms_configure Arbitrary File Corruption Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=206&type=vulnerabilities'}, {'name': '57706', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57706-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0481?


Explain the CVE ID: What does the identifier CVE-2004-0482 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0482.

Multiple integer overflows in (1) procfs_cmdline.c, (2) procfs_fpregs.c, (3) procfs_linux.c, (4) procfs_regs.c, (5) procfs_status.c, and (6) procfs_subr.c in procfs for OpenBSD 3.5 and earlier allow local users to read sensitive kernel memory and possibly perform other unauthorized activities.


Provide references for further information: Can you share references or external links related to CVE-2004-0482?

{'name': 'openbsd-procfs-gain-privileges(16226)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16226'}, {'name': '20040517 OpenBSD procfs', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=108481812926420&w=2'}, {'name': '20040513 [3.5] 006: SECURITY FIX: May 13, 2004', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata35.html'}, {'name': '20040513 [3.4] 020: SECURITY FIX: May 13, 2004', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata34.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/006_procfs.patch'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.deprotect.com/advisories/DEPROTECT-20041305.txt'}, {'name': '6114', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6114'}, {'name': '11605', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11605'}, {'name': '[openbsd-security-announce] 20040513 procfs vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=openbsd-security-announce&m=108445767103004&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/020_procfs.patch'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0482?


Explain the CVE ID: What does the identifier CVE-2004-0483 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0483.

Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service (infinite loop) via certain RPC requests.


Provide references for further information: Can you share references or external links related to CVE-2004-0483?

{'name': '10372', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10372'}, {'name': 'rpcmountd-rpc-dos(16175)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16175'}, {'name': '1010185', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010185'}, {'name': '6201', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6201'}, {'name': '11628', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11628'}, {'name': '20040503-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040503-01-P'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0483?


Explain the CVE ID: What does the identifier CVE-2004-0484 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0484.

mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a table containing a form that crosses multiple td elements, and whose "float: left" class is defined in a link to a CSS stylesheet after the end of the table, which may trigger a null dereference.


Provide references for further information: Can you share references or external links related to CVE-2004-0484?

{'name': '20040518 Unknown IE bug with css-styles', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108490218632590&w=2'}, {'name': 'ie-css-dos(16189)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16189'}, {'name': '10382', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10382'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0484?


Explain the CVE ID: What does the identifier CVE-2004-0485 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0485.

The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a disk image file (.dmg) to be mounted as a disk volume.


Provide references for further information: Can you share references or external links related to CVE-2004-0485?

{'name': '11622', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11622/'}, {'name': 'VU#210606', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/210606'}, {'name': 'APPLE-SA-2004-05-21', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00053.html'}, {'name': 'APPLE-SA-2004-05-28', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.seifried.org/pipermail/security/2004-May/003743.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://fundisom.com/owned/warning'}, {'name': 'macos-runscript-code-execution(16166)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16166'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0485?


Explain the CVE ID: What does the identifier CVE-2004-0486 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0486.

HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a help: URI handler.


Provide references for further information: Can you share references or external links related to CVE-2004-0486?

{'name': 'VU#578798', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/578798'}, {'name': '11622', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11622/'}, {'name': 'APPLE-SA-2004-05-21', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00053.html'}, {'name': '10356', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10356'}, {'name': '6184', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6184'}, {'name': '20040516 Vuln. MacOSX/Safari: Remote help-call, execute scripts', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0837.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.fundisom.com/owned/warning'}, {'name': 'macos-runscript-code-execution(16166)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16166'}, {'name': '1010167', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010167'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2004-0486?


Explain the CVE ID: What does the identifier CVE-2004-0487 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-0487.

A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service (resource consumption) and possibly execute arbitrary programs.