CVE-2004-2645

CVE-2004-2645 affects the ASN.1 Compiler (asn1c) prior to 0.9.7. The vulnerability occurs when processing CHOICE types with indefinite-length structures. The available documents do not specify the impact or exploit vectors beyond stating “unknown impact.” There is no explicit remediation detail i...

CVE-2004-2642

Yeemp 0.9.9 and earlier errors in encrypting inbound files allow remote attackers to spoof the sender’s identity. Affected: Yeemp inbound file handling (0.9.9 and earlier). Exploitation potential is network-based with low complexity; impact includes partial confidentiality and integrity loss, no ...

CVE-2004-2631

CVE-2004-2631 affects phpMyAdmin 2.5.1–2.5.7, where LeftFrameLight being FALSE enables eval injection in left.php, allowing remote attackers to execute arbitrary PHP code via a crafted table name. The issue is rated CVSS v2 base 7.5 (Network, Low attack complexity, no authentication). Connected a...

CVE-2004-2632

CVE-2004-2632 concerns phpMyAdmin versions 2.5.1 through 2.5.7. The vulnerability allows remote attackers to modify configuration settings using tampered $cfg['Servers'] variables, resulting in unauthorized access to MySQL servers. This is described in the CVE entry and corroborated by multiple s...

CVE-2004-2633

Affected software: Sesamie 1.0. The CVE describes an unspecified vulnerability that allows remote anonymous attackers to gain access to repositories of other users via unknown vectors. CVSS v2 base score 5.1 (Medium): Network vector, high attack complexity, no authentication, partial impact on co...

CVE-2004-2630

The MIME transformation system transformations/textplainexternal.inc.php in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...

CVE-2004-2638

The CVE-2004-2638 vulnerability affects osCommerce 1.5.1 via the Admin Access With Levels plugin. The issue allows remote attackers to access files in the admin/ directory by setting in_login to a non-zero value, enabling partial confidentiality and integrity impact. No exploitation details or sp...

CVE-2004-2624

Cross-site scripting XSS vulnerability in "TextSearch" in WackoWiki 3.5 allows remote attackers to inject arbitrary web script or HTML via the "phrase" parameter...

CVE-2004-2627

CVE-2004-2627 involves Java 2 Micro Edition (J2ME). The issue is that J2ME does not properly validate bytecode, which enables remote attackers to escape the Kilobyte Virtual Machine (KVM) sandbox and execute arbitrary code. The available connected docs reiterate the same description and do not pr...

CVE-2004-2644

Technical details for CVE-2004-2644 are not publicly available in the provided documents; the Connected documents do not add concrete information about affected products, root cause, or remediation. Monitor for updates.

CVE-2004-2635

The CVE-2004-2635 entry concerns an ActiveX control for McAfee Security Installer Control System 4.0.0.81. The vulnerability allows remote attackers to access the Windows registry via web pages that call the control’s RegQueryValue() method. Affected component: ActiveX control; root cause: regist...

CVE-2004-2620

The CVE-2004-2620 issue affects ripMIME 1.3.1.0, specifically the MIMEH_read_headers function. The vulnerability arises from improper handling of trailing "\r" and "\n" characters in headers, which leads to a buffer underflow. This is documented across multiple connected entries (Red Hat, CVE lis...

CVE-2004-2621

Nortel Contivity VPN Client 2.1.7, 3.00, 3.01, 4.91, and 5.01, when opening a VPN tunnel, does not check the gateway certificate until after a dialog box has been displayed to the user, which creates a race condition that allows remote attackers to perform a man-in-the-middle MITM attack...

CVE-2004-2624

CVE-2004-2624: WackoWiki 3.5 contains a cross-site scripting (XSS) flaw in the TextSearch feature. The vulnerability enables injection of arbitrary script/HTML via the phrase parameter, allowing remote attackers to execute client-side code in affected pages. Documents consistently identify WackoW...

CVE-2004-2641

CVE-2004-2641 describes an unspecified vulnerability affecting Sun Fire 3800/4800/4810/6800, Sun Fire V1280, and Netra 1280. The issue allows remote attackers to cause a denial of service (system controller hang) by sending IP packets with the Type of Service (TOS) bits set. Documents consistentl...

CVE-2004-2649

CVE-2004-2649 affects Eudora 6.1.0.6. The issue enables a remote attacker to obfuscate URLs shown in the status bar by inserting a large number of characters (for example spaces encoded as "&#32") in the middle of the URL, potentially misleading users about the actual link. The provided documents...

CVE-2004-2646

Affected software: Free Web Chat 2.0. Vulnerable component: addUser function in UserManager.java. Root cause: input condition where usrName is null leads to an uncaught NullPointerException, resulting in a denial of service. Exploit details, impact, and remediation are not provided beyond this de...

CVE-2004-2631

Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote attackers to execute arbitrary PHP code via a crafted table name...

CVE-2004-2623

Technical details about CVE-2004-2623 are not publicly available in the provided documents. No concrete affected product/version, root cause, or remediation is described. Monitor for updates from official sources.

CVE-2004-2629

CVE-2004-2629 describes multiple vulnerabilities in the H.323 protocol implementation used by First Virtual Communications Click to Meet Express (and related products) that allow remote attackers to cause denial of service, demonstrated via the H.225 protocol test suite (PROTOS). The affected com...