CVE-2004-2679

CVE-2004-2679 affects Check Point Firewall-1 4.1 up to NG AI R55. The vulnerability arises when an attacker sends an Internet Key Exchange (IKE) message with a crafted Vendor ID payload, causing the firewall to reveal version information and potentially other details in its response. This is an i...

CVE-2004-2678

Technical details about CVE-2004-2678 are not publicly available in the provided documents. No explicit affected products, versions, or impact are documented here. Monitor for updates from official sources.

CVE-2006-7027

CVE-2006-7027 concerns Microsoft Internet Security and Acceleration (ISA) Server 2004. The vulnerability arises when the Host header contains unusual ASCII characters (including a tab), enabling remote attackers to manipulate portions of the log file and potentially leverage it for further attack...

CVE-2004-2677

CVE-2004-2677 affects QwikMail SMTP (qwik-smtpd) version 0.3 and earlier. The flaw is a format string vulnerability in qwik-smtpd.c that allows remote attackers to achieve arbitrary code execution via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variable...

Mandrake Linux Security Advisory : wxGTK2 (MDKSA-2004:111)

Several vulnerabilities have been discovered in the libtiff package; wxGTK2 uses a libtiff code tree, so it may have the same vulnerabilities : Chris Evans discovered several problems in the RLE run length encoding decoders that could lead to arbitrary code execution. CVE-2004-0803 Matthias Clase...

Design/Logic Flaw

Linux kernel 2.6.x before 2.6.20 allows local users to read unreadable binaries by using the interpreter PTINTERP functionality and triggering a core dump, a variant of CVE-2004-1073...

Microsoft Excel Worksheet Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file .xls. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

Code injection

Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows user-assisted remote attackers to execute arbitrary code...

CVE-2007-0208

CVE-2007-0208 is the Microsoft Word Macro Vulnerability described in MS07-014. Word 2000 SP3, Word 2002/XP SP3, Word 2003 SP2, Works 2004–2006, and Word 2004 for Mac are affected by a flaw where Word does not properly validate the document’s properties, failing to display the macro security warni...

Microsoft Security Bulletin MS07-015 Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (932554)

Microsoft Security Bulletin MS07-015 Vulnerabilities in Microsoft Office Could Allow Remote Code Execution 932554 Published: February 13, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Office Impact of Vulnerability: Remote Code Execution Maximum Severity...

MS07-014 / MS07-015: Vulnerabilities in Microsoft Word and Office Could Allow Remote Code Execution (929434 / 932554) (Mac OS X)

The remote host is running a version of Microsoft Office that is affected by various flaws that may allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Word or another Office application...

PT-2007-2125 · Microsoft · Office Excel +2

Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions 2000, XP, 2003, and 2004 for Mac Description: A remote code execution issue exists in Excel, allowing attackers to execute arbitrary code when the application opens a specially crafted file. This file could be sent as...

CVE-2004-2676

The CVE-2004-2676 issue affects WebRoot Spy Sweeper, specifically the SpySweeperTray.exe component in Spy Sweeper before version 2.0. The vulnerability is that it does not drop privileges when using the help functionality, allowing local users to gain privileges. The available sources identify th...

CVE-2007-0442

Unspecified vulnerability in IBM OS/400 R530 and R535 has unknown impact and remote attack vectors, related to an "Integrity Problem" involving LIC-TCPIP and TCP reset. NOTE: it is possible that this issue is related to CVE-2004-0230, but this is not certain...

CVE-2004-2675

ArGoSoft FTP Server vulnerable before 1.4.1.6. Remote authenticated users can crash the server by issuing SITE PASS with a long password, leading to database corruption. Affected: ArGoSoft FTP Server

CVE-2004-2674

ArGoSoft FTP Server prior to 1.4.1.6 is affected by a directory traversal vulnerability that allows remote authenticated users to determine the existence of arbitrary files via .. sequences in the SITE UNZIP argument. The root cause is improper handling of path traversal in the SITE UNZIP command...

CVE-2004-2673

This CVE concerns ArGoSoft FTP Server prior to 1.4.1.6. The vulnerability consists of multiple buffer overflows triggered by long arguments in commands SITE ZIP (first or second argument) or SITE COPY, allowing a remote authenticated user to cause a denial of service and potentially execute arbit...

CVE-2004-2672

Affected product : ArGoSoft FTP Server prior to 1.4.2.2. Vulnerability : remote attacker can upload ".lnk" shortcut files, enabling arbitrary file manipulation due to an upload vulnerability. Impact : potential read and write access to files and directories on the FTP server. Root cause / vector ...

Microsoft Excel Malformed Column Record Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker could exploit this issue to execute arbitrary code with the privileges of the user running the application. The attacker could leverage the issue to compromise affected computers. Technologies Affected...

CentOS 4 : PHP (CESA-2005:406)

Updated PHP packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was found in the way PHP...