CVE-2004-2549

CVE-2004-2549 affects Nortel WLAN APs 2220, 2221, and 2225. A remote attacker can cause a service crash (DoS) by sending a TCP request containing a large string followed by eight newline characters to Telnet (port 23) or HTTP (port 80); the issue is described as possibly due to a buffer overflow....

CVE-2004-2548

Multiple cross-site scripting XSS vulnerabilities in NetWin 1 SurgeMail before 2.0c and 2 WebMail allow remote attackers to inject arbitrary web script or HTML via a a URI containing the script, or b the username field in the login form. NOTE: it is possible that the first attack vector is...

CVE-2004-2548

NetWin SurgeMail before 2.0c and NetWin WebMail expose multiple cross-site scripting (XSS) vulnerabilities. Affected inputs: (1) a URI containing the script, and (2) the login form’s username field. The issue may be related to an error-message effect described in CVE-2004-2547. No remediation det...

CVE-2004-2555

Riverdeep FoolProof Security 3.9.x on Windows 98/ME is affected by a cryptographic weakness: the product uses arithmetic and XOR operations to relate the Control password to the Administrator password, enabling local users who know the Control password and password recovery key to compute the Adm...

CVE-2004-2558

Technical details about CVE-2004-2558 are not provided in the connected documents. Available descriptions reference an unspecified session hijacking vulnerability in IBM Tivoli/WebSphere products. Monitor for updates and rely on official advisories for precise impact and fixes.

CVE-2004-2547

NetWin SurgeMail (before 2.0c) and NetWin WebMail expose sensitive information through HTTP error handling. Requests to the root ("/"), to "/scripts/", or to a non-existent file can cause error messages that reveal the server path. This vulnerability is described as an information disclosure affe...

CVE-2004-2550

SandSurfer before version 1.7.1 is vulnerable to multiple cross-site scripting (XSS) in unspecified Perl scripts, potentially allowing attackers to inject scripts that execute in affected users’ browsers when viewing reports containing injected data. The Nessus entry and CVE records align on the ...

CVE-2004-2557

CVE-2004-2557 affects NetGear WG602 (WG602v1) Wireless Access Point 1.7.14, which contains a hardcoded admin account: username "superman" and password "21241036". This permits remote configuration changes by an attacker. Connected documents confirm the concrete details; exploitation status and fi...

CVE-2004-2556

CVE-2004-2556 affects NetGear WG602 (WG602v1) Wireless Access Point firmware 1.04.0 and 1.5.67, which contain a hardcoded administrator account (username: super, password: 5777364). This flaw allows remote attackers to modify the device configuration. The issue is rooted in a hardcoded credential...

CVE-2004-2550

Multiple cross-site scripting XSS vulnerabilities in unspecified Perl scripts in SandSurfer before 1.7.1 allow remote attackers to inject arbitrary web script or HTML, which is later executed by a target who views reports containing the injected data...

CVE-2004-2546

CVE-2004-2546 affects Samba up to 3.0.6, with multiple memory leaks that can cause a denial of service via memory consumption. The record consistently states Samba before 3.0.6 is vulnerable; the impact is a DoS, not arbitrary code execution. Remediation mentioned in sources is upgrading to Samba...

CVE-2004-2553

The CVE-2004-2553 issue affects IgnitionServer ignitionServer 0.1.2 through 0.1.2-R2. A remote authenticated user with local IRC operator privileges can escalate to a global IRC operator by issuing the unofficial umode command with the +ORD argument. This privilege escalation is validated by mult...

CVE-2004-2554

The CVE-2004-2554 issue affects Novell Client Firewall (NCF) 2.0, which is based on Agnitum Outpost Firewall. The vulnerability allows local attackers to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with SYSTEM priv...

CVE-2004-2552

CVE-2004-2552 : Buffer overflow in XBoard 4.2.7 and earlier may allow local users to execute arbitrary code via a long -icshost command line argument. The program is not setuid and not typically invoked by remote processes, so there may not be a common cross-privilege attack vector. No exploitati...

CVE-2004-2544

The CVE-2004-2544 entry concerns Secure Computing Corporation Sidewinder G2 6.1.0.01. The Admin Console exports private keys when exporting firewall certificates, potentially exposing sensitive information. Affected component: Admin Console; vulnerability: exporting private keys. Impact described...

CVE-2004-2545

CVE-2004-2545 affects Secure Computing Corporation Sidewinder G2 6.1.0.01. Described as a remote denial of service of the SMTP proxy triggered by an “extremely busy network.” The embedded monitoring sub-system reportedly restarts after the failure. No remediation or concrete exploitation details ...

CVE-2004-2545

Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service SMTP proxy failure via unknown attack vendors involving an "extremely busy network." NOTE: this might not be a vulnerability because the embedded monitoring sub-system automatically restarts...

CVE-2004-2542

Technical specifics (affected product versions, exact attack vectors, exploit details, or remediation) are not provided in the supplied documents. Monitor for updates.

CVE-2004-2543

The CVE-2004-2543 entry concerns Secure Computing Corporation Sidewinder G2 6.1.0.01. It describes a potential remote DoS where an attacker can trigger a proxy failure by sending invalid traffic to the T.120 or RTSP proxy, or sending invalid MIME messages to the mail filter. The note indicates th...

CVE-2004-2540

readObject in 1 Java Runtime Environment JRE and 2 Software Development Kit SDK 1.4.0 through 1.4.205 allows remote attackers to cause a denial of service JVM unresponsive via crafted serialized data...