CVE-2004-2513

The issue is CVE-2004-2513: a buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code via a long SELECT command. The connected CVE records confirm the affected product (Mercury/Pegasus Mail 4.01) and the root cause (IMAP buffer overflow...

CVE-2004-2526

CVE-2004-2526 describes a directory traversal vulnerability in the web frontend (ldacgi.exe) of IBM Tivoli Directory Server 4.1 and earlier. The issue allows remote attackers to view arbitrary files via a .. (dot dot) in the Template parameter, leveraging the CGI component to access files with th...

CVE-2004-2495

The CVE-2004-2495 entry affects Ability Mail Server 1.18, specifically the Webmail, Admin, and SMTP services. The vulnerability allows remote attackers to trigger a denial-of-service via a large number of simultaneous connections, resulting in high CPU usage. The available documents confirm the i...

CVE-2004-2500

CVE-2004-2500 affects IlohaMail versions prior to 0.8.14RC1. The vulnerability is described as unspecified with unknown impact/vector in the CVE entry. Connected Nessus/NASL data corroborates an unspecified vulnerability affecting 0.8.13 or earlier and provides a remediation: upgrade to IlohaMail...

CVE-2004-2499

Technical details for CVE-2004-2499 are not publicly available in the provided documents. Monitor for updates.

CVE-2004-2502

CVE-2004-2502 : The vulnerability affects im-switch before 11.4-46.1 on Fedora Core 2, where a symlink race on the imswitcher[PID] temporary file allows a local user to overwrite arbitrary files. The root cause is a race condition involving the temporary file used by im-switcher, enabling tamperi...

CVE-2004-2501

CVE-2004-2501 describes a stack-based buffer overflow in MailEnable’s IMAP service (Professional 1.52 and Enterprise 1.01 and earlier). The vulnerability arises from improper boundary/IMAP data handling, allowing an unauthenticated remote attacker to cause a crash or execute arbitrary code by sen...

CVE-2004-2485

CVE-2004-2485 affects PHP Live! prior to 2.8.2. It describes an unspecified vulnerability that allows remote attackers to include arbitrary files and directories via unspecified attack vectors, with potential arbitrary PHP code execution as implied by related Nessus text. The vulnerability detail...

CVE-2004-2522

CVE-2004-2522 describes a cross-site scripting (XSS) vulnerability in the Gattaca Server 2003, version 1.1.10.0, within the web.tmpl component. The issue allows remote attackers to inject arbitrary web script or HTML by supplying manipulated values to either the template or language parameters. T...

CVE-2004-2521

CVE-2004-2521 affects Gattaca Server 2003 (version 1.1.10.0). The vulnerability allows a remote attacker to cause a denial-of-service (application crash) by opening a large number of connections to SMTP (port 25) or POP (port 110). The issue is documented across multiple sources (NVD, CVE list, E...

CVE-2004-2537

Technical details (affected product/version, root cause, exploit methods) are not provided in the supplied documents. Monitor for updates.

CVE-2004-2512

CVE-2004-2512 affects DCP-Portal 5.3.2 and earlier. It is a CRLF injection/vulnerability in calendar.php that enables HTTP response splitting via CRLF (%0d%0a) sequences in the PHPSESSID parameter, allowing spoofing of web content and potential cache poisoning. The provided documents confirm the ...

CVE-2004-2486

The CVE-2004-2486 entry concerns Dropbear SSH Server before version 0.43, where the DSS verification code frees uninitialized variables. This memory handling issue could allow remote attackers to gain access. The available connected documents consistently identify the affected component (Dropbear...

CVE-2004-2536

Summary of CVE-2004-2536 : The Linux kernel 2.6.x releases up to 2.6.5 contain a fault in the exit_thread path (process.c) where per-TSS io_bitmap pointers are not invalidated when a process obtains IO permissions via ioperm and later exits. This can allow other processes to access the per-TSS po...

CVE-2004-2507

The CVE-2004-2507 entry concerns the Linksys WVC11B Wireless-B Internet Video Camera. Affected software: main.cgi. Vulnerability type: absolute path traversal, exploitable via an absolute pathname provided in the next_file parameter. Root cause: improper handling of file paths in main.cgi allows ...

CVE-2004-2528

The CVE-2004-2528 entry corresponds to a cross-site scripting (XSS) flaw in WebCamSoft’s watchdog software, specifically in the CGI component sresult.exe. The vulnerability is triggered by unsanitized input to the cam parameter, enabling an attacker to inject arbitrary script/HTML via the paramet...

CVE-2004-2531

X.509 certificate verification in GnuTLS 1.0.16 can be exploited by sending RSA certificates with very large modulus/exponent values to cause resource exhaustion and a denial of service. The CERT advisory notes cross‑vendor impact and that patches/updates have been released by vendors; apply the ...

CVE-2004-2533

Summary: CVE-2004-2533 affects Serv-U FTP Server (version 4.1, possibly 4.0) via the SITE CHMOD command, causing partial memory corruption and a denial of service. Related data confirms a separate but related issue (CVE-2004-2111) described as a stack-based buffer overflow in the same SITE CHMOD ...

CVE-2004-2539

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2004-2517

The OpenVAS entries confirm a concrete issue in myServer 0.7.1: a remote denial-of-service caused by sending a specially crafted HTTP POST to index.html with View=Logon, leading to the server crash or stop in responding. Affected component is the HTTP POST handling for the Logon operation; the vu...