CVE-2004-0952

Affected software : HP-UX B.11.00–B.11.23 running Ignite-UX. Vulnerability : the add_new_client operation in Ignite-UX causes the TFTP server to grant world-writable permissions to part of the directory tree. Impact : remote attackers could modify data or trigger disk consumption via unauthorized...

CVE-2004-0951

HP Ignite-UX: The TFTP service’s make_recovery command (pre-C.6.2.241) copies the password file within the TFTP directory tree, enabling remote disclosure of /etc/passwd. Affected: HP-UX Ignite-UX TFTP server. Impact: partial confidentiality. Remediation: upgrade to C.6.2.241 or later (HP Ignite-...

CVE-2004-2420

Hitachi JP1/File Transmission Server/FTP 6 and 7 (JP1) is affected. A remote attacker can trigger a denial of service (daemon halt) by sending a port scan that includes reset packets. The CVE entry describes the exposure but does not provide exploit code or in-the-wild details in the connected do...

CVE-2004-2427

CVE-2004-2427 affects Axis Network Camera (versions 2.40 and earlier) and Axis Video Server (versions 3.12 and earlier). The vulnerability enables unauthenticated remote access to sensitive information via direct requests to admin/getparam.cgi, admin/systemlog.cgi, admin/serverreport.cgi, and adm...

CVE-2004-2423

CVE-2004-2423 affects Ipswitch IMail Server web calendar component prior to 8.13. Reports in multiple sources (NVD, CVE lists, OpenVAS) describe a denial-of-service via specific content, with OpenVAS noting multiple buffer overflows in the IMail web interface. The vulnerability is triggered remot...

CVE-2004-2424

This CVE concerns BEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2. A vulnerability in HTTPS session handling allows remote attackers to cause a denial of service by consuming network ports, with the server failing to release ports after a session ends. The vulnerability is described ...

CVE-2004-2419

Keene Digital Media Server 1.0.2 is affected. The issue allows local users to read the dmscore.db database to obtain usernames and passwords. The connected Nessus plugin notes a prior vulnerability path related to Directory Traversal and Authentication Bypass for versions before 1.0.4, suggesting...

CVE-2004-2412

CVE-2004-2412 involves VP-ASP Shopping Cart 4.0–5.0 with SQL injection vulnerabilities in the catalogid parameter of the two endpoints, shopreviewlist.asp and shopreviewadd.asp . The vulnerability enables remote attackers to execute arbitrary SQL commands against the underlying database, as state...

CVE-2004-2409

Samhain is affected by CVE-2004-2409 due to a buffer overflow in the sh_hash_compdata function on versions 1.8.9 through 2.0.1 when running in update mode (-t update). This condition may allow an attacker to execute arbitrary code. The vulnerability is described as a buffer overflow in the update...

CVE-2004-2434

Microsoft Internet Explorer 6.0 SP1 is affected by CVE-2004-2434. The vulnerability arises when a user saves a link containing the string "::{" (colon colon left brace); this triggers a null dereference during error message formatting, allowing a remote attacker to cause a browser crash (denial o...

CVE-2004-2432

WinAgents TFTP Server 3.0 is affected. The vulnerability arises when handling a request for a file with a long file name, likely caused by an off-by-one buffer overflow, leading to denial of service (server crash). The available sources describe the impact as a crash/DDoS-like availability issue ...

CVE-2004-2411

The CVE-2004-2411 entry concerns VP-ASP Shopping Cart versions 4.0–5.0 where the CleanseMessage function in shop$db.asp does not adequately sanitize inputs. This permits remote XSS attacks that do not rely on traditional [removed] tags, demonstrated via javascript in IMG tags affecting the cat pa...

CVE-2004-2430

Trend OfficeScan Corporate Edition 5.58 (and possibly earlier) has a local privilege escalation vulnerability: opening a help window from a virus-detection pop-up does not drop privileges, allowing local users to gain SYSTEM privileges. The connected documents confirm affected product and the pri...

CVE-2004-2425

Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent and possibly other shell metacharacters in the query string to virtualinput.cgi...

CVE-2004-2410

Unknown vulnerability in sh_hash_compdata for Samhain 1.8.9 through 2.0.1 might allow attackers to cause a denial of service via a null pointer dereference. Affected software is Samhain; the description does not specify broader impact, root cause details, or a remediation. No exploits or patches ...

CVE-2004-2429

The CVE affects EnderUNIX spamGuard before 1.7-BETA. It describes multiple stack-based and heap-based buffer overflows in parser.c (qmail_parseline, sendmail_parseline), loadconfig.c (loadconfig, removespaces), and possibly other functions in functions.c, allowing remote arbitrary code execution....

CVE-2004-2428

Abczone.it WWWguestbook 1.1 stores db/dbase.mdb under the web document root with insufficient access control, allowing remote attackers to obtain plaintext credentials. No exploitation details or patches are provided in the available documents.

CVE-2004-2407

Technical details about CVE-2004-2407 are not publicly provided in the supplied documents. No concrete affected product/version, vector, impact, or remediation is documented here. Monitor for official disclosures and updates from vendors and security authorities.

CVE-2004-2405

CVE-2004-2405 describes a buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, triggered by a malformed LHA archive. Impact stated: remote attackers could bypass scanning or cause a denial of service (crash or module restart), depending on the ...

CVE-2004-2416

CVE-2004-2416 is a buffer overflow in CCProxy’s Telnet proxy ping command for CCProxy v6.2 and earlier. The stack can be overwritten by sending an overly long address to the ping (p) command, allowing remote code execution on vulnerable Windows systems. Public proof‑of‑concepts and exploits exist...