CVE-2004-2357

The CVE-2004-2357 issue affects the embedded MySQL 4.0 server used by Proofpoint Protection Server, where the root user has no password. This allows remote attackers to connect to the backend MySQL instance and read or modify data. Connected sources confirm a default-credentials scenario rather t...

CVE-2004-2362

CVE-2004-2362 affects PHPX 3.2.6 and earlier. The issue allows remote attackers to obtain the physical path of PHPX by supplying a null or invalid value in the “limit” parameter, causing the pathname to be leaked in a database error message (demonstrated via forums.php). This is an information-di...

CVE-2004-2343

Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess restrictions defined in httpd.conf with directives like Deny From All by using an ErrorDocument directive. The Red Hat and CVE records confirm this is the same issue; vendor dispute noted that .htaccess applies to extern...

CVE-2004-2375

Vulnerability CVE-2004-2375 affects the POP3 server in 1st Class Mail Server 4.0. A buffer overflow can be triggered by an APOP USER command with an excessively long second parameter (digest), potentially causing a denial of service and possibly allowing arbitrary code execution. Documented in CV...

CVE-2004-2366

The CVE references a buffer overflow in GlobalSCAPE Secure FTP Server 2.0 B03.11.2004.2. An attacker could trigger a denial of service (crash) by sending a SITE command with a long argument, constituting a remote exploit vector against the affected server. The root cause is the overflow condition...

CVE-2004-2361

The CVE-2004-2361 issue affects the Digital Reality game engine as used in Haegemonia 1.0–1.0.7 and Desert Rats vs. Afrika Korps 1.0. A remote attacker can cause a crash (DoS) by sending a chat message with an oversized payload, triggering an out-of-bounds read. The available documents do not pro...

CVE-2004-2386

Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers passed from the HandleCPCCommand function...

CVE-2004-2387

CVE-2004-2387 : A buffer overflow in the HandleCPCCommand function affects sercd (before 2.3.1) and sredird (before 2.2.1), enabling remote attackers to execute arbitrary code. The description confirms a remote-code-execution impact due to a memory corruption flaw in the affected components. Conc...

CVE-2004-2384

Affected software: NullSoft Winamp versions around 5.02 and older (Winamp

CVE-2004-2304

CVE-2004-2304 affects Trillian (0.74 and earlier) and Trillian Pro (2.01 and earlier). The issue is an integer/heap-based buffer overflow triggered by a DirectIM packet, enabling remote denial of service and potentially arbitrary code execution. Connected sources reference a DirectIM overflow in ...

CVE-2004-2369

Technical details (affected product/component/root cause/impact/fix) are not publicly available in the provided documents for CVE-2004-2369. Monitor official advisories for updates; current data only confirms a directory traversal vulnerability in webadmin.nsf.

CVE-2004-2356

Affected software: Fizmez Web Server 1.0. The vulnerability is an early termination issue where a client connects and disconnects without sending data, triggering a null pointer dereference and causing a denial of service (server crash). Root cause: null pointer dereference during premature conne...

CVE-2004-2324

DotNetNuke (formerly IBuySpy Workshop) 1.0.6–1.0.10d is affected by an SQL injection vulnerability in LinkClick.aspx, exploitable via the (1) table and (2) field parameters to modify the backend database. The vulnerability allows remote attackers to alter database contents. Documents do not provi...

CVE-2004-2355

Crafty Syntax Live Help (CSLH) prior to 2.7.4 is affected by a Cross-site scripting (XSS) vulnerability. The issue, described in CVE-2004-2355, allows remote attackers to inject arbitrary web script or HTML via the name field of a livehelp or chat session. Supported by NVD entry, the description ...

CVE-2004-2379

@Mail 3.64 for Windows contains XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via (1) the Displayed Name attribute in util.pl and (2) the Folder attribute in showmail.pl. Affected component/functionality: util.pl (Displayed Name) and showmail.pl (Folder). ...

CVE-2004-2317

Technical details for CVE-2004-2317 are not publicly available in the provided documents. No concrete information on affected products, versions, root cause, or impact is present. Monitor for updates from credible sources.

CVE-2004-2386

Format string vulnerability in the LogMsg function affects sercd before 2.3.1 and sredird 2.2.1 and earlier, allowing remote attackers to execute arbitrary code via format string specifiers passed from HandleCPCCommand. Exploitation details are not provided in the connected documents. Affected pr...

CVE-2004-2314

The CVE-2004-2314 entry concerns Novell iChain Server prior to 2.2 Field Patch 3b, version 2.2.116. The Telnet listener is configured with no password by default, allowing remote attackers to gain access if the service is reachable. The vulnerability is rated with a base score of 7.5 (HIGH) by NV...

CVE-2004-2315

The vulnerability CVE-2004-2315 affects Mbedthis AppWeb HTTP server prior to version 1.0.2, where a remote attacker can cause a denial of service (crash) by sending an empty OPTIONS request. The provided documents state the issue and affected version but do not include exploit details, root-cause...

CVE-2004-2308

CVE-2004-2308 describes a cross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier . The issue arises in the dohtaccess.html component, where the dir parameter is not properly sanitized, allowing remote attackers to inject arbitrary web script or HTML. The available connected...